User’s Guide 


Publication number E2480-97003 
June 2000 


For Safety information, Warranties, and Regulatory information, see the pages 
behind the index. 


© Copyright Agilent Technologies 1994-2000 
All Rights Reserved 


Solutions for the Motorola 
CPU32 


Solutions for the Motorola CPU32—At a Glance 


This manual describes several ways to connect an Agilent Technologies 
logic analysis system to your target system. These connections use an 
analysis probe, plus an emulation module (for an emulation solution). 


Analysis Probe 


The analysis probe connects your logic analyzer to your target system 
for state and timing analysis. The analysis probe can be used with an 
Agilent Technologies 16600A/700A-series logic analysis system or with 
other Agilent Technologies logic analyzers. 


The analysis probe can be purchased alone, or as part of an emulation 
solution. 


Emulation Module and Target Interface Module 


The emulation module plugs into your Agilent Technologies 16600A/ 
700A-series logic analysis system frame. The emulation module lets 
you use the target processor’s built-in background debugging features, 
including run control and access to registers and memory. A high-level 
source debugger can use the emulation module to debug code running 
on the target system. You can connect the emulation module to the 
analysis probe or you can connect it to a debug port on the target 
system through the provided target interface module (TIM). 


Emulation Solution 


The emulation solution includes an analysis probe, an emulation 
module, cables and adapters, and the Agilent Technologies B4620B 
Source Correlation Tool Set (for analyzing high-level source code). 
This solution is designed to be used with an Agilent Technologies 
16600A/700A-series logic analysis system. 
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Overview 


Overview 


This chapter describes: 
e Setup Checklist 
e Setup Assistant 


e Equipment used with the analysis probe Cincluding a list of logic analyzers 
supported) 


e Equipment used with the emulation module 
e System configurations 


e Additional information sources 
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Setup Checklist 


Follow these steps to connect your equipment: 


e Check that you received all of the necessary equipment. See page 20 
(analysis probe) or page 25 (emulation module). 


e Ifyou need to install an emulation module in an Agilent Technologies 
16600A/700A series logic analysis system, see page 142. 


e Install the software. See page 29. 


e If you have an Agilent Technologies 16600A/700A-series logic analysis 
system, use the Setup Assistant to help you connect and configure the 
analysis probe and emulation module. See page 19. 


e If you do not have an Agilent Technologies 16600A/700A-series logic 
analysis system, install the analysis probe (see page 42). 
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Setup Assistant 


The Setup Assistant is an online tool for connecting and configuring 
your logic analysis system for microcontroller and bus analysis. The 
Setup Assistant is available on the Agilent Technologies 16600A and 
16700A-series logic analysis systems. You can use the Setup Assistant 
in place of the connection and configuration procedures provided in 
this manual. 


This menu-driven tool will guide you through the connection 
procedures for connecting the logic analyzer to an analysis probe, an 
emulation module, or other supported equipment. It will also guide you 
through connecting an analysis probe to the target system. 


Start the Setup Assistant by clicking its icon in the system window. 


Setup Assistant - Target and Analysis Probe or Inverse Assembler 


If you ordered this product with your Agilent Technologies 16600A/ 
700A-series logic analysis system, the logic analysis system has the 
latest software installed, including support for this product. If you 
received this product after you received your logic analysis system, see 
the “Installing Software” chapter (page 29). 


Solutions for CPU32 19 


Chapter 1: Overview 


Analysis Probe 


Analysis Probe 


This section lists equipment supplied with the analysis probe and 
equipment requirements for using the analysis probe. 


Equipment supplied 


The equipment supplied with the analysis probe is shown in the 
illustration on the next page. It is listed below: 


The Agilent Technologies E2480A analysis probe circuit board. 


Four Agilent Technologies E5346A high-density termination cables. 


Logic analyzer configuration files and inverse assembler software on a CD- 


ROM (for Agilent Technologies 16600A/700A series logic analysis 


systems). 


Logic analyzer configuration files and inverse assembler software on five 


3.5-inch disks (for other Agilent Technologies logic analyzers). 


This User’s Guide. 


A package-specific probing kit (see below). 


Processor 
Package 132-pin POFP 144-pin TOFP 160-pin QFP 
132-pin 144-pin 160-pin 
Transition Board Transition Board | Transition Board 
; E3417A E5336A E5373A 
Equipment Probe Adapter Probe Adapter Probe Adapter 
Supplied 
User’s Guide E5338A E5350A 
Flexible Cable Flexible Cable 
User's Guide User’s Guide 
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Equipment Supplied with the Agilent Technologies E2480A Analysis Probe 
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Minimum equipment required 


For state and timing analysis of a Motorola CPU32 target system, you 
need all of the following items. 


e The Agilent Technologies E2480A Analysis Probe. 

e Four Agilent Technologies E5346A high-density cables. 

e Amicrocontroller-specific transition board. 

e A QFP probe adapter kit for your specific microcontroller package. 


e The probe adapter User's Guide, for connecting the probe adapter to the 
target system. 


e One of the logic analyzers listed on page page 23. The logic analyzer 
software version requirements are listed on page 24. 


The above is the minimum equipment required to make a measurement. If 
you want to configure the analysis probe to reconstruct addresses, you 
must also have an emulation module. 


Additional equipment supported 


Emulation module. The Agilent Technologies E2480A has a built-in 
connector for an emulation module. 


Agilent Technologies B4620B Source Correlation Tool Set. The 
analysis probe and inverse assembler may be used with the Agilent 
Technologies B4620B Source Correlation Tool Set. 
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Logic analyzers supported 


The table below lists the logic analyzers supported by the Agilent 
Technologies E2480A analysis probe. Logic analyzer software version 
requirements are shown on the following page. 


The Agilent Technologies E2480A requires four logic analyzer pods (68 
channels) for inverse assembly. The analysis probe contains six high- 
density connectors (12 logic analyzer pods). Two of the connectors are 
for State analysis, and the other four are for Timing analysis. 


Logic Analyzers Supported 


Logic Analyzer ae State Speed Timing Speed Memory Depth 
16600A 204 100 MHz 125 MHz 64 k states 
16601A 136 100 MHz 125 MHz 64 k states 
16602A 102 100 MHz 125 MHz 64 k states 
16603A 68 100 MHz 125 MHz 64 k states 
16550A (one or two cards) 102/card 100 MHz 250 MHz 4k states 
16554A (one or two cards) 68/card 70 MHz 125 MHz 512 k states 
16555A (one or two cards) —68/card 110 MHz 250 MHz 1 M states 
16555D (one or two cards) —68/card 110 MHz 250 MHz 2 M states 
16556A (one or two cards) —68/card 100 MHz 200 MHz 1 M states 
16556D (one or two cards) —68/card 100 MHz 200 MHz 2 M states 
16557D (one or two cards) 68/card 135 MHz* 250 MHz 2 M states 
1660A/AS/C/CS/CP 136 100 MHz 250 MHz 4k states 
1661A/AS/C/CS/CP 102 100 MHz 250 MHz 4k states 
1662A/AS/C/CS/CP 68 100 MHz 250 MHz 4k states 
1670A 136 70 MHz 125 MHz 64 k or .5 M states 
1670D 136 100 MHz 125 MHz 64 k or | M states 
1671A 102 70 MHz 125 MHz 64k or .5M 
1671D 102 100 MHz 125 MHz 64kor1M 
1672A 68 70 MHz 125 MHz 64k or.5M 
1672D 68 100 MHz 125 MHz 64kor1M 


*For the 16557D, the state and timing speeds decrease for four- or five-card config- 
urations. 
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Logic analyzer software version requirements 


The logic analyzers must have software with a version number greater 
than or equal to those listed below to make a measurement with the 
Agilent Technologies E2480A. You can obtain the latest software at the 
following web site: 


http://www.agilent.com/find/logicanalyzer 


If your software version is older than those listed, load new system 
software with the higher version numbers before loading the Agilent 
Technologies E2480A software. 


Logic Analyzer Software Version Requirements 
Agilent 


Technologies 
Logic Analyzer 


Minimum Logic Analyzer Software Version for use with 
Agilent Technologies E2480A 


16600A-series The latest Agilent Technologies 16600A logic analyzer software 
version is on the CD-ROM shipped with this product. 
1660A/AS Series 3.01 
1660C/CS/CP A.02.01 
Series 
1670A/D Series  A.02.02 
Agilent 
Technologies 
Mainframe* 
16700A-series The latest Agilent Technologies 16700A logic analyzer software 
version is on the CD-ROM shipped with this product. 


16500C 1.07 
Mainframe 
16500B 3.14 
Mainframe 


* The mainframes are used with the Agilent Technologies 16550 and 16554/55/56 
logic analyzers. 
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Emulation Module 


This section lists equipment supplied with the emulation module and 
lists the minimum equipment required to use the emulation module. 


Equipment supplied 


The equipment supplied with your emulation module includes: 


An Agilent Technologies 16610A emulation module. If you ordered an 
emulation module as part of your Agilent Technologies 16600A or 16700A 
logic analysis system, it is already installed in the frame. 


A target interface module (TIM) circuit board. 


A emulation module loopback test board (Agilent part number E3496- 
66502). 


Firmware for the emulation module and/or updated software for the 
Emulation Control Interface on a CD-ROM. 


A 50-pin ribbon cable for connecting the emulation module to the target 
interface module or the Agilent Technologies E2480A analysis probe. 


A 10-pin ribbon cable for connecting the target interface module to the 
target system. 


Torx T-8, T-10 and T-15 screwdrivers. 
This User's Guide. 
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Equipment Supplied with the Emulation Module 


Minimum equipment required 


The following equipment is required to use the emulation module: 


A method for connecting to the target system. The Agilent 
Technologies E2480A analysis probe provides a debug port connector. 
You can also design a debug port connector on the target system (see 
“Designing a Target System for the Emulation Module” on page 138). 


e An Agilent Technologies 16600A or 16700A logic analysis system. 


e Auser interface, such as a high-level source debugger or the logic analysis 
system’s Emulation Control Interface. 
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Emulation Solution 


An emulation solution uses the equipment and software already 
described in this chapter. 


The combination of an analysis probe, an emulation module, and an 
Agilent Technologies 16600A or 16700A logic analysis system lets you 
both trace and control microcontroller activity on the target system. 


The analysis probe supplies signals from the target microcontroller to 
the logic analyzer. A configuration file sets up the logic analyzer to 
properly interpret these signals. 


You can use a debugger or the logic analysis system’s Emulation 
Control Interface to configure and control the target processor and to 
download program code. You can use the Agilent Technologies B4620B 
Source Correlation Tool Set to analyze high-level source code using the 
logic analysis system. 
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Additional Information Sources 


Additional or updated information can be found in the following places: 


Newer editions of this manual may be available. Contact your local 
Agilent Technologies representative. 


If you have a probing adapter, the instructions for connecting the probe 
to your target microcontroller are in the Probing Adapter 
documentation. 


Application notes may be available from your local Agilent 
Technologies representative or on the World Wide Web at: 


http://www.agilent.com/find/logicanalyzer 


If you have an Agilent Technologies 16600A or 16700A logic analysis 
system, the online help for the Emulation Control Interface has 
additional information on using the emulation module. 


The measurement examples include valuable tips for making 
emulation and analysis measurements. You can find the measurement 
examples under the system help in your Agilent Technologies 16600A/ 
700A logic analysis system. 
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Installing Software 

This chapter explains how to install the software you will need for your 
analysis probe or emulation solution. 

Installing and loading 


Installing the software will copy the files to the hard disk of your logic 
anlysis system. Later, you will need to load some of the files into the 
appropriate hardware module. 


Logic analysis system or logic analyzer frame 


Install Load) | ogic analyzer 
CD-ROM or ; : 
flexible disk Hard Disk or emulation 
ee ald module 
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What needs to be installed 
Agilent Technologies 16600A/700A-series logic analysis 
systems 


If you ordered an emulation solution with your logic analysis system, 
the software was installed at the factory. 


The following files are installed when you install a processor support 
package from the CD-ROM: 


e Logic analysis system configuration files 

e Inverse assembler (automatically loaded with the configuration files) 
e Personality files for the Setup Assistant 

e Emulation module firmware (for emulation solutions) 


e Emulation Control Interface (for emulation solutions) 


The Agilent Technologies B4620B Source Correlation Tool Set is 
installed withthe logic analysis system’s operating system. 


Other Agilent Technologies logic analyzers 
The following files can be installed from a floppy disk: 


e Logic analyzer configuration files, which automatically load the inverse 
assembler 
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To install the software from CD-ROM (16600A/ 
700A) 


Installing a processor support package from a CD-ROM will take just a 
few minutes. If the processor support package requires an update to 
the Agilent Technologies 16600A/700A operating system, installation 
may take approximately 15 minutes. 


If the CD-ROM drive is not connected, see the instructions printed on 
the CD-ROM package. 


Turn on the CD-ROM drive first and then turn on the logic 
analysis system. 


Insert the CD-ROM in the drive. 


3 Click the System Admin icon. 


Click Install... . 

Change the media type to “CD-ROM” if necessary. 

Click Apply. 

From the list of types of packages, select “PROC-SUPPORT.” 
A list of the available processor support packages will be displayed. 
Click on the “M683XX” package. 


If you are unsure if this is the correct package, click Details for 
information on what the package contains. 


Click Install... . 


The dialog box will display “Progress: completed successfully” when 
the installation is complete. 


Click Close. 


The configuration files are stored in /logic/configs/hp/processor. The 
inverse assemblers are stored in /logic/ia. 
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Installing Software 


The instructions printed on the CD-ROM package for a summary of the 
installation instructions. 


The online help for more information on installing, licensing, and 
removing software. 


To list software packages which are installed 
(16600A/700A) 


In the System Administration Tools window, click List... . 


To install software on other logic analyzers 


Consult the documentation for your logic analyzer for details. 
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Connecting and Configuring the Analysis Probe 


This chapter shows you how to connect the logic analyzer to the target 
system through the analysis probe. 


If you are connecting to an Agilent Technologies 16600A-series or 
16700A-series logic analyzer, use the Setup Assistant to connect and 
configure your system (see page 19). Use this manual for additional 
information, if desired. 


If you are not using the Setup Assistant, follow the instructions given in 
this chapter. This chapter covers the following tasks; the order shown 
here is the recommended order for performing these tasks: 


e Check that the target system meets the necessary requirements 
e Read the power on/power off sequence 

e Connect the analysis probe to the target system 

e Connect the analysis probe to the logic analyzer 


e Configure the logic analyzer 
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Target System Requirements 


The Agilent Technologies E2480A connects to a number of 
microcontrollers and packages. The keep-out area and clearance 
requirements are described below. 


Keep-out area on the target board 


The keep-out area varies according to which probe adapter you are 
using. Refer to the documentation included with your probe adapter 
for keep-out area and dimensions. 


Clearance above the target board 


See the diagram on the next page for the dimensions of the analysis 
probe. You must also allow space for the cables which plug into the top 
of the analysis probe. 


The data sheet for your analysis probe, available from your Agilent 
Technologies representative, has more detailed information and 
diagrams regarding the keep-out area and analysis probe dimensions. 


Solutions for CPU32 37 


Chapter 3: Connecting and Configuring the Analysis Probe 
Target System Requirements 


Analysis probe—circuit board dimensions 


The following figure gives the dimensions for the analysis probe circuit 
board. The dimensions are listed in inches and millimeters. 


Jl 


lol Clitite bate 


e2480e03 


Analysis Probe Circuit Board Dimension Diagram 
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Power-on/Power-off Sequence 


Listed below are the sequences for powering on and off a fully 
connected system. Simply stated, your target system is always the last 
to be powered on, and the first to be powered off. 


To power on 16600A and 16700A-series logic 
analysis systems 


Ensure the target system is powered off. 


Turn on the logic analyzer. The Setup Assistant will guide you 
through the process of connecting and configuring the analysis 
probe. 


When the analysis probe is connected to the target system and 
logic analyzer, and everything is configured, turn on your target 
system. 


To power on all other logic analyzers 

With all components connected, power on your system in the following 
order: 

e Logic analysis system. 


e Your target system. 
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To power off 


e Turn off your target system. 


e Turn off your logic analysis system. 


e2480b08 
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Read the power on/power off sequence. 


Analysis 
Probe 
ia 
‘lk Analysis Logic 
Probe Analyzer 
Analysis yall 
robe Analyzer 


Set Switches Configuration Files and 


Analysis etalle Inverse Assembler Files 
Probe 


Connection Sequence 
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Connecting the Analysis Probe to the Target 
System 
This section explains how to connect the Agilent Technologies E2480A 


analysis probe to the target system. Connecting the analysis probe to 
the target system consists of the following steps. 


Note that there are separate instructions for the different QFP 
packages. The instructions in this manual are only an overview. Use 
the documentation included with your probe adapter for detailed 
connecting procedures. 


e Turn off the target system. 


e Turn off the logic analyzer (unless you are using an Agilent Technologies 
16600/16700A logic analysis system). 


e Connect the transition board to the analysis probe. 
e Connect analysis probe/transition board to the probe adapter. 
e Connect the probe adapter to the target system. 


The remainder of this section describes these general steps in more 
detail. 


Protect Your Equipment 


The analysis probe socket assembly pins are covered for shipment 
with a conductive foam wafer or conductive plastic pin protector. 
This is done to protect the delicate gold-plated pins from damage 
due to impact. When you're not using the analysis probe, protect 
the socket assembly pins from damage by covering them with the 
pin protector. 
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To connect the transition board 


The microcontroller-specific transition board properly routes the 
signals from the probe adapter to the analysis probe. To connect the 
transition board to the analysis probe: 


e Verify that there are no bent pins on the PGA socket of the analysis probe. 


e Align the beveled corner of the transition board with the pin Al corner of 
the PGA connector on the underside of the analysis probe. The illustration 
below shows the beveled corner and the pin Al corner, as seen from the 
top of the analysis probe. 


Serious damage to the target system or analysis probe can result from 
incorrect connection. Note the position of pin 1 (or pin Al) on the target 
system, transition board, and the analysis probe prior to making any 
connection. Also, take care to align the analysis probe connector with the pins 
on the probe adapter assembly so that all pins are making contact. 


Once all pins are aligned correctly, firmly press the transition board 
onto the analysis probe PGA socket. You might need a solid surface to 
press against. 


Analysis 
probe 


At 
(underneath) 


Transition — _ 


22480226 board 


Pin Al Corner and Transition Board Alignment 
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To connect the analysis probe to the probe 
adapter 


The orientation of the analysis probe with respect to the probe adapter 
depends on the orientation of the probe adapter with respect to pin 1 
of the target system. Use the appropriate illustration from the following 
pages to ensure you have the proper orientation. To connect the 
analysis probe to the probe adapter: 


Verify that there are no bent pins on the PGA socket of the transition 
board. 


Note the color (or number of black squares) on the side of the probe 
adapter or flexible cable that is connected to the pin 1 side of the target 
system microcontroller. Orient the analysis probe so that the solid 
white side of the transition board aligns with the same color (or 
number of black squares) on the PGA end of the probe adapter or 
flexible cable. 


Serious damage to the target system or analysis probe can result from 
incorrect connection. Note the position of pin 1 (or pin Al) on the target 
system, transition board, and the analysis probe prior to making any 
connection. Also, take care to align the analysis probe connector with the pins 
on the probe adapter assembly so that all pins are making contact. 


Once all pins are aligned correctly, firmly press the analysis probe/ 
transition board onto the PGA socket of the probe adapter or flexible 
cable. 
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Connecting the probe adapter to the target 
system 


The microcontrollers supported by the Agilent Technologies E2480A 
analysis probe come in a variety of QFP packages. The QFP probe 
adapter assemblies allow the analysis probe to be connected to the 
target system without removing the microcontroller from the target 
system. Refer to the documentation for your probe adapter for 
information on attaching the QFP Probe Adapter to your target system. 


The illustrations on the following pages show the allowable rotations 
for the different QFP probe adapters when used with the Agilent 
Technologies E2480A. Note that the orientation (rotation) of the 
analysis probe with respect to the probe adapter depends on the 
orientation (rotation) of the probe adapter with respect to the target 
system. To ensure that you do not have mechanical interference 
between the analysis probe and the target system, use the rotation 
diagrams on the following pages, and the instructions in "To connect 
the analysis probe to the probe adapter," to determine the desired 
orientation before you connect the probe adapter to the target system. 


Serious damage to the target system or analysis probe can result from 
incorrect connection. Note the position of pin 1 (or pin Al) on the target 
system, transition board, and the analysis probe prior to making any 
connection. Also, take care to align the analysis probe connector with the pins 
on the probe adapter assembly so that all pins are making contact. 


To prevent equipment damage, remove power from all system components 
before making attachments. 
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132-pin PQFP Probe Adapter Rotations 
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132-Pin POFP Probe Adapter Rotation Diagram 
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144-pin TQFP Probe Adapter Rotations 
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144-Pin TOFP Probing System Rotation Diagram 
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160-pin QFP Probe Adapter Rotations 
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Connecting the Analysis Probe to the Logic 
Analyzer 


This section shows the connections between the logic analyzer pod 
cables and the high-density cables on the analysis probe. Use the 
appropriate page for your logic analyzer. The configuration file names 
for each logic analyzer are included with the connection diagrams. 


Number of Pods Used/Required. The type of measurement to be 
made determines the number of logic analyzer pods to be used. State 
measurements require four pods. Full timing measurements require 
eight pods. If fewer than eight pods are available for timing, the logic 
analyzer will truncate the pods allocated. In this case, viewing the logic 
analyzer FORMAT menu shows the pod allocations. If the allocations 
will not acquire the desired signals, the allocations can be altered 
manually. 


This section shows diagrams for connecting the analysis probe to the 
Agilent Technologies logic analyzers listed below: 


e 16600A logic analyzers (page 52) 

e 166014 logic analyzers (page 55) 

e 16602A logic analyzers (page 58) 

e 16603A logic analyzers (page 61) 

e 16550A logic analyzers (one or two cards) (page 64) 
e 16554/55/56/57 logic analyzers (one or two cards) (page 68) 
e 1660A/AS/C/CS/CP (page 70) 

e 1661A/AS/C/CS/CP logic analyzers (page 72) 

e 1662A/AS/C/CS/CP logic analyzers (page 74) 

e 1670A/D logic analyzers (page 76) 

e 1671A/D logic analyzers (page 79) 

e 1672A/D logic analyzers (page 82) 
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To connect the high-density termination cables 
to the analysis probe 


Four Agilent Technologies E5346A high-density termination cables, 
and labels to identify them, are included with the Agilent Technologies 
E2480A. Connect the cables to the connectors on the analysis probe as 
shown in the illustration below. Attach the labels to the cables after 
connecting the cables to the logic analyzer. Note that J1 and J6 are 
State connectors, and J2 through J5 are Timing connectors. 


Even # LA 
Pod cables JP ee / pod label 
from logic - Bei EG 


Even # pod 
label (optional) 


Odd # LA ~- 
pod label 


Odd # pod cable 


label (optional) 


Even # 
_ probe label 


probe label __ 
(back side) 


22480e06 


Connecting High-Density Cables to the Analysis Probe 
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Connecting the high-density cables to the logic 
analyzer 


The following pages show the connections between the logic analyzer 
pod cables and the high-density cables of the analysis probe. Note that 
for each logic analyzer, there are separate connections for State and 
Timing. Refer to the appropriate pages for your logic analyzer. The 
configuration file names for each logic analyzer and each CPU32 target 
system are included with the connection diagrams. 


Pod 2 State 
Ph Pod 2 Timing 
a 
NS fa 
Pod 7, 8 Timing - Pod 5, 6 Timing 
= aa 
re ~ Pod 3, 4 Timing 
J 
Pod 3, ate 
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Analysis Probe Pod Locations 
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To connect to the 16600A logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16600A logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 
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Agilent Technologies 16600A State Connections. 


High-Density 


Termination 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_387X_15S for 
state analysis with the 16600A logic analyzer. 
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Agilent Technologies 16600A Timing Connections. 


Logic 
~ Analyzer 
Cables 


Configuration File (Timing) 


Use configuration file C_833X_1T or C_387X_1T for 
Timing analysis with the 16600A logic analyzer. 
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To connect to the 16601A logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16601A logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 
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Agilent Technologies 16601A State Connections. 


High-Density 
Termination 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 16601A logic analyzer. 


Agilent Technologies 16601A Timing Connections 
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Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for 
timing analysis with the 16601A logic analyzer. 
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To connect to the 16602A logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16602A logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 16602A State Connections. 
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High-Density 


ermination 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for state 
analysis with the 16602A logic analyzer. 
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Agilent Technologies 16602A Timing Connections. 


ligh-Density 


Termination 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for timing 
analysis with the 16602A logic analyzer. 
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To connect to the 16603A logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16603A logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections 


Agilent Technologies 16603A State Connections. . 
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2480637 


High-Density 
Termination 


Cabl 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 16603A logic analyzer. 
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Agilent Technologies 16603A Timing Connections. 


ligh-Density 


Termination 


Cables 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for 
timing analysis with the 16603A logic analyzer. 
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To connect to the 16550A analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16550A logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 16550A State Connections. 
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Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 16550A logic analyzer. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


One-card Agilent Technologies 16550A Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for 
timing analysis with the 16550A logic analyzer. 
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Two-card Agilent Technologies 16550A Timing Connections. 


Expansion pods 
3,4, 5, & 6 


not used 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for 
timing analysis with the 16550A logic analyzer. 
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To connect to the 16554/55A/56/57D analyzers 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 16554A/55A/56A and 16555D/56D/57D logic analyzers. 
Find the labels that were shipped with the high-density cables and use 
them to help identify the connections. 


Agilent Technologies 16554/55/56/57 State Connections. 


Master 
card 


Configuration File (State Analysis) 
Use configuration files C_33X_2S or C_37X_2S 
for state analysis with the 1654/55/56/57 logic 
analyzers. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


One- or two-card Agilent Technologies 16554/55/56/57 Timing 
Connections. 


Expansion 


cara 
va 


22480205 


Configuration File (Timing Analysis) 
Use configuration files C_33X_2T or C_37X_2T for timing 
analysis with the 16554/55/56/57 logic analyzers. 
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To connect to the 1660A/AS/C/CS/CP logic 
analyzers 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1660A/C logic analyzers. Find the labels that were 
shipped with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1660-series State Connections. . 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 1660-series logic analyzer. 
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Agilent Technologies 1660-series Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for timing 
analysis with the 1660-series logic analyzer. 


Solutions for CPU32 71 


Chapter 3: Connecting and Configuring the Analysis Probe 
Connecting the Analysis Probe to the Logic Analyzer 


To connect to the 1661A/AS/C/CS/CP logic 
analyzers 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1661A/C logic analyzers. Find the labels that were 
shipped with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1661-Series State Connections. . 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 1661-series logic analyzer. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


Agilent Technologies 1661-Series Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_33X_1T or C_37X_1T for timing 
analysis with the 1661-series logic analyzer. 
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To connect to the 1662A/AS/C/CS/CP logic 
analyzers 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1662A/C logic analyzers. Find the labels that were 
shipped with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1662-Series State Connections. . 


Configuration File (State Analysis) 
Use configuration files C_33X_1S or C_37X_1S for 
state analysis with the 1662-series logic analyzer. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


Agilent Technologies 1662-Series Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_833X_1T or C_87X_IT for 
timing analysis with the 1662-series logic analyzer. 
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To connect to the 1670A/D logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1670A/D logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1670-series State Connections. . 
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E2480E28 


Configuration File (State Analysis) 
Use configuration files C_833X_2S or C_387X_2S for 
state analysis with the 1670-series logic analyzers. 
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Agilent Technologies 1670-series Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_33X_2T or C_37X_2T for timing 
analysis with the 1670-series logic analyzer. 
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To connect to the 1671A/D logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1671A/D logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1671-Series State Connections. . 
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2480015 


Configuration File (State Analysis) 
Use configuration files C_83X_2S or C_387X_2S for 
state analysis with the 1671-series logic analyzers. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


Agilent Technologies 1671-Series Timing Connections. 


E2480E29 


Configuration File (Timing Analysis ) 
Use configuration files C_33X_2T or C_37X_2T for timing 
analysis with the 1671-series logic analyzer. 
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To connect to the 1672A/D logic analyzer 


Use the following figures to connect the analysis probe to the Agilent 
Technologies 1672A/D logic analyzer. Find the labels that were shipped 
with the high-density cables and use them to help identify the 
connections. 


Agilent Technologies 1672-Series State Connections. . 
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©2480216 


Configuration File (State Analysis) 
Use configuration files C_833X_2S or C_387X_2S for 
state analysis with the 1672-series logic analyzer. 
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If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, viewing the logic analyzer 
FORMAT menu shows the pod allocations. If the allocations will not 
acquire the desired signals, the allocations can be altered manually. 


Agilent Technologies 1672-Series Timing Connections. 


Configuration File (Timing Analysis) 
Use configuration files C_833X_2T or C_37X_2T for 
timing analysis with the 1672-series logic analyzer. 
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Configuring the Analysis Probe 


Configuring the analysis probe consists of the following: 
e Setting the ID switches 

e Interpreting the LEDs 

e Configuring the analysis probe for address reconstruction 


The functionality of the analysis probe and logic analyzer, and the 
accuracy of displays provided by the inverse assembler, depend on the 
address-reconstruction feature of the analysis probe. 


“Address reconstruction overview” on page 228 for a description of 
address reconstruction and its relationship to logic analyzer 
functionality. 
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To set the ID switches 


The Agilent Technologies E2480A provides an identification (ID) 
which may be used by other system components. The ID consists of 
primary and secondary values. The primary value is fixed (identifies 
CPU82 family) by hardware. The secondary ID is set by the 8-bit switch 
on the analysis probe, which must be configured to match the 
microcontroller being used. Positions 1 - 7 of the switch generate a 
binary value which must correspond to the last two digits of the 
microcontroller (binary 32 for MC68332). Position 8 is reserved and 
should be set to the "1" position. 


The figure below shows the switch settings for the MC68332. 


Switch Settings for MC68332 Target System 
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To interpret the LEDs 


The LEDs on the analysis probe hardware have meanings described 
below, after the following has been done: 


1. The ID switches have been set (described in previous section). 


2. The analysis probe configuration has been downloaded. 


LED Interpretations 
e LED DS1 - Default 


This LED identifies the type of configuration loaded into the reconstruction 
hardware. If the LED is lit, the default configuration is loaded. If this LED is 
not lit, a custom configuration is loaded. This LED only has meaning if LED 
DS2 is not lit. 


e LED DS2 - NO CONFIG 


This LED indicates whether or not a configuration has been loaded into the 
analysis probe. If it is lit, no configuration has been loaded. If it is not lit, a 
configuration has been loaded. 


e LED DS8 - Reserved for future support of hardware breakpoints. 


The illustration on the following page shows the Agilent Technologies 
E2480A LEDs. 


If DS2 remains lit after power has been applied to the analysis probe, 
the analysis probe contains an unknown reconstruction configuration. 
To resolve this unknown state, cycle power to the analysis probe or 
execute a "pp load" command (see next section). 
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Agilent Technologies E2480A LED Locations 
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Configuring the analysis probe for address 
reconstruction 


The Agilent Technologies E2480A is shipped with all reconstruction 
disabled. This analysis probe configuration provides accurate analysis 
when A[19:23], FC[0:2], SIZO, SIZ1, DSACKO, and DSACK1 are valid. If 
your target system is configured differently, you must configure the 
analysis probe to match your target system configuration. 


To perform address reconstruction, the analysis probe stores copies of 
the processor’s internal registers in non-volatile memory. To configure 
the analysis probe, the Agilent Technologies E2480A must be 
connected to an emulation module. 


The general steps are: 
Set the emulation module’s EMSIM registers. 
Load the EMSIM register values into the analysis probe. 


These steps may be performed using a debugger or an Agilent 
Technologies 16600A/700A-series logic analysis system. 


To configure with a debugger 


Configure the the target processor’s SIM/SCIM registers using 
one of the methods in Chapter 7, “Using Internal Registers (SIM and 
EMSIM Registers),” beginning on page 167. 


You need to set the emulator copies (EMSIM registers) of the MCR, 
PEPAR, CSPARO, CSPAR1, and the CSBARx and CSOR«x of all chip 
selects being used. 


Using a debugger, there are two methods of configuration: 


e Manually write the values into SIM/SCIM registers MCR, PEPAR, CSPARO, 
CSPAR1, and the CSBARx and CSOR«x of all chip selects being used. 
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e Load code into the target, perform a "reset" and "run", then perform a 
"break" after the SIM/SCIM registers have been configured. 


Start a telnet session or open your debugger’s command 
window. 


Enter the the syne sim built-in command. 
This will copy the SIM registers into the emulator’s EMSIM registers. 
Enter the pp load built-in command. 


This will copy the EMSIM registers into the analysis probe’s non- 
volatile memory. The analysis probe will then be configured to properly 
perform address reconstruction. 


To configure with a logic analysis system 


In the Emulation Control Interface, open the Configuration 
window. 


Configure the values of the EMSIM registers using one of the 
methods in Chapter , “Using Internal Registers (SIM and EMSIM 
Registers),” beginning on page 167. 


You need to set the emulator copies of the MCR, PEPAR, CSPARO, 
CSPAR1, and the CSBARx and CSORx of all chip selects being used. 


Click the Load analysis probe button. 


This sends app load command to the emulator to copy the EMSIM 
registers into the analysis probe’s non-volatile memory. 
“Using the Emulation Control Interface” on page 133. 


Chapter 7, “Using Internal Registers (SIM and EMSIM Registers),” 
beginning on page 167. 
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Configuring the Logic Analysis System 


You configure the logic analyzer by loading a configuration file. The 
information in the configuration file includes: 


e Label names and channel assignments for the logic analyzer 
e Inverse assembler file name 


The configuration file you use is determined by the logic analyzer you 
are using. The configuration file names are listed with the logic 
analyzer connection tables, and in a table at the end of this section. 


The procedures for loading a configuration file depend on the type of 
logic analyzer you are using. There is one procedure for the Agilent 
Technologies 16600/700 series logic analysis systems, and another 
procedure for the Agilent Technologies 1660-series, 1670-series, and 
logic analyzer modules in an Agilent Technologies 16500B/C 
mainframe. Use the appropriate procedures for your analyzer. 
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To load configuration and inverse assembler 
files—16600/700 logic analysis systems 


If you did not use Setup Assistant, you can load the configuration and 
inverse assembler files from the logic analysis system hard disk. 


Click on the File Manager icon. Use File Manager to ensure that 
the subdirectory /logic/configs/hp/m683xx/E2480A/ exists. 


If the above directory does not exist, you need to install the CPU32 
Processor Support Package. Close File Manager, then use the 
procedure on the CD-ROM jacket to install the CPU32 Processor 
Support Package before you continue. 


Using File Manager, select the configuration file you want to load 
in the /logic/configs/hp/m683xx/E2480A/ directory, then click 
Load. If you have more than one logic analyzer installed in your 
logic analysis system, use the Target field to select the machine 
you want to load. 


The logic analyzer is configured for CPU32 analysis by loading the 
appropriate configuration file. Loading the indicated file also 
automatically loads the inverse assembler. The configuration file you 
use is determined by the logic analyzer you are using, and whether you 
are performing state analysis or timing analysis. The configuration file 
names are located at the bottom of the table showing the connections 
for your particular logic analyzer. They are also shown in the table on 
page 95. 


Close File Manager. 


92 Solutions for CPU32 


ap WO NY = 


Chapter 3: Connecting and Configuring the Analysis Probe 
Configuring the Logic Analysis System 


To load configuration files—other logic 
analyzers 


If you have an Agilent Technologies 1660-series, 1670-series, or logic 
analyzer modules in an Agilent Technologies 16500B/C mainframe use 
these procedures to load the configuration file and inverse assembler. 


The first time you set up the logic analyzer, make a duplicate copy of 
the flexible disk. For information on duplicating disks, refer to the 
reference manual for your logic analyzer. 


For logic analyzers that have a hard disk, you might want to create a 
directory such as CPU82 on the hard drive and copy the contents of the 
floppy onto the hard drive. You can then use the hard drive for loading 
files. 


Configuring the logic analyzer consists of loading the software by 
inserting the floppy disk into the logic analyzer disk drive and loading 
the proper configuration file. 


Insert the floppy disk in the front disk drive of the logic analyzer. 
Go to the Flexible Disk menu. 

Configure the menu to load. 

Use the knob to select the appropriate configuration file. 


The configuration file you use is determined by the logic analyzer you 
are using, and whether you are performing state analysis or timing 
analysis. The configuration files are shown with the logic analyzer 
connection tables, and are also in the table on the next page. 


Select the appropriate analyzer on the menu. The Agilent 
Technologies 165xx logic analyzer modules are shown in the 
table on the next page. 


Execute the load operation on the menu to load the file into the 
logic analyzer. 
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The logic analyzer is configured for CPU32 analysis by loading the 
appropriate configuration file. Loading a state configuration file also 
automatically loads the inverse assembler. 


If you are using the Agilent Technologies 16505A Prototype 
Analyzer, insert the "16505 Prototype Analyzer" flexible disk into 
disk drive of the prototype analyzer and update the Agilent 
Technologies 16505A from the Session Manager. You must close 
your workspace to run the update. 


The Agilent Technologies 16505A Prototype Analyzer requires 
software version A.01.30 or higher to work with the Agilent 
Technologies E2480A. 
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Analyzer Model 


16600A 

16601A 

16602A 

16550A (one card) 
16550A (two cards) 
16554A (one card) 
16555A/D (one card) 
16556A/D (one card) 
16557D (one card) 
16554A (two card) 
16555A/D (two card) 
16556A/D (two card) 
16557D (two card) 
1660A/AS/C/CS/CP 
1661A/AS/C/CS/CP 
1662A/AS/C/CS/CP 
1670A/D 

1671A/D 


1672A/D 
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Analyzer 
Description 
(Modules Only) 


na 
na 
na 


100 MHz STATE 
500 MHz TIMING 
100 MHz STATE 
500 MHz TIMING 
0.5M SAMPLE 
70/250 MHz LA 
1.0M SAMPLE 
110/250 MHz LA 
1.0M SAMPLE 
100/400 MHz LA 
1.0M SAMPLE 
100/400 MHz LA 
0.5M SAMPLE 
70/250 MHz LA 
1.0M SAMPLE 
110/250 MHz LA 
1.0M SAMPLE 
100/400 MHz LA 
1.0M SAMPLE 
100/400 MHz LA 
na 


na 


a 


a 


na 


na 


na 


Configuration File for 
Inverse Assembly 


C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_1S 
C_37X_1S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 
C_33X_2S 
C_37X_2S 


Configuration File 


for Timing 


C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_1T 
C_37X_1T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
C_33X_2T 
C_37X_2T 
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Analyzing the CPU32 with a Logic Analyzer 


This chapter describes modes of operation for the Agilent Technologies 
E2480A analysis probe. It also describes data, symbol encodings, and 
information about the inverse assembler. 


The information in this chapter is presented in the following sections: 
e Modes of operation 
e Logic analyzer configuration 


e Using the inverse assembler 
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Modes of Operation 


The Agilent Technologies E2480A analysis probe can be used in State 
mode or Timing mode. The following sections describe these operating 
modes. 


State mode 


In State mode, the logic analyzer uses clock store qualification to 
capture address, data, and status information once during an 
instruction or data cycle. This mode is set up by the State configuration 
files. The State configuration files also automatically load the inverse 
assembler. 


Timing mode 


In Timing mode, the logic analyzer samples the microcontroller pins 
asynchronously, at a user-selected sampling rate. The Timing mode is 
set up by the Timing configuration files. 


State and Timing modes use different connectors on the analysis 
probe. The Timing pins are direct connections to the microcontroller 
signals. The State pins have active circuitry on the analysis probe. 
State information is acquired three target system clock cycles after 
the same information is captured in Timing mode. 
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Logic Analyzer Configuration 


The following sections describe the logic analyzer configuration as set 
up by the configuration files. 


Trigger specification 


The trigger specification is set up by the software to store all states. If 
you modify the trigger specification to store only selected bus cycles, 
incorrect or incomplete disassembly may be displayed. 


Format menu 


This section describes the organization of CPU32 signals in the logic 
analyzer’s Format menu. 


The configuration software sets up the analyzer format menu on the 
analyzer. The figure on the following page shows the Format menu for 
the CPU382. 


The configuration files contain predefined format specifications. These 
format specifications include all labels for monitoring the 
microcontroller. The tables on the following pages show the signals 
used in the STAT label and the predefined symbols set up by the 
configuration files. 


Do not modify the ADDR, DATA, or STAT labels in the format 
specification if you want inverse assembly. Changes to these labels may 
cause incorrect or incomplete inverse assembly. 
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100MHz State/SO0MHz Timing B - CPU32 
File Edit 


[Navigate [Ltn JD 7 


Config 
Mode: |Full Channel 7 4K 7 100 MHz eaj[ Mast Clk (B)...] C¢IT)*¢kK=03] 
Setup/Hold... pars ae a age Pod Bd Pod B3 Pod B2 Pod B1 


Master Clk OF Master Clk O Master Clk O Master Clk O 


—— sie ——— Eee ee es ee 


Format Menu (State) 


If fewer than eight pods are available for timing, the logic analyzer will 
truncate the pods allocated. In this case, the logic analyzer Format 
menu shows the pod allocations. If the allocations will not acquire the 
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desired signals, the allocations can be altered manually. 


100MHz State/500MHz Timing B - 68332 lela 


File Edit Help 


Format Menu (Timing) 
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Status Encoding 


This section describes symbol information that has been set up by the 
analysis probe configuration software. The signal-to-connector tables 
in the “Hardware Reference” chapter list all the CPU82 signals probed 
and their corresponding analyzer channels. 


The table below describes each of the bits of the STAT label. This table 
is specifically for a state configuration. The timing configurations have 
many of the same signals, and those signals are represented by the 
same symbols used for state configurations. 


Agilent Technologies E2480A STAT Bit Description 


Bit STAT Label Description 

0 ~ShoCy When this bit is asserted it indicates the 
execution of an internal (show) cycle. 

1 Rd/~Wr Indicates the direction of the transfer. 

2 ~IFtch Indicates the bus cycle is an instruction fetch. 

3 ~PFish Indicates the instruction pipe has been flushed. 

4:5 Sizx Indicates the number of bytes being written or 


capable of being read. 


6:7 DSAckx Indicates the port size (in bytes) of the peripheral 
being read from/ written to. 

8 ~BErr Indicates that the bus cycle terminated with an 
error. 

9 ~Freeze When asserted, indicates the microcontroller is 


in background mode. 


10 ~Bkpt Indicates a hardware breakpoint has been 
encountered. 
11 ~BGAck When asserted, indicates the microcontroller 


does not own the bus. 


12:14 FCx These bits indicate the area of memory with 
which a transfer is taking place. 
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Predefined Logic Analyzer Symbols 


The configuration software sets up symbol tables on the logic analyzer. 
The tables define a number of symbols which make several of the STAT 
fields easier to interpret. The following table lists the symbol 


descriptions. 


CPU32 Symbolic Representation of Status Bits 


Label Signal Symbol Value 
~ShoCy ~Show_Cycle Int 0 
Ext 1 
Rd/~Wr Rd/~Wr Wr 0 
Rd 1 
~IFtch ~Inst_Fetch Fetch 0 
(blank) 1 
~PFish ~Pipe_Flush Flush 0 
(blank) 1 
Sizx Siz[0:1] long 00 
byte Ol 
word 10 
3byt 11 
DSAckx DSAck[0:1] (blank) 00 
word 01 
byte 10 
wait 11 
~BErr ~BErr Error 0 
(blank) 1 
~Freez ~Freeze Bkgrnd 0 
Runnin 1 
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Label Signal Symbol Value 
~Bkpt ~Bkpt Break 0 
(blank) 1 
~BGAck ~BGAck NoBus 0 
(blank) 1 
FCx FC[0:2] show 000 
user data 001 
user pgrm 010 
(blank) O11 
(blank) 100 
supr data 101 
supr prgm 110 
CPU 111 
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To qualify stored data 


If you do want to acquire Background cycles, add “L=1” as a clock 
qualifier. If you do not want to acquire coprocessor cycles, add “M=1” 
as a clock qualifier. 


C¢It)«¢L=19] 


Edges Edges 


and and 


Qualifiers Qualifiers 


L=1 Clock Qualifier 


To open this window in an Agilent Technologies 16600A/700A-series 
logic analysis system, select the Format tab and click Master 
Clock.... 
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Using the Inverse Assembler 


This section discusses the general output format of the inverse 
assembler and processor-specific information. 


To display captured state data 


The logic analyzer displays captured state data in the Listing menu. 
The inverse assembler display is obtained by setting the base for the 
DATA label to Invasm. The following figure shows a typical Listing 
menu. 


File Edit Options Invasm Source 


[ievisete fen JD 
Search 
Label Vatue [——]EE] «hen [Present — IEE] [ewe] [Pres] 


cPus2 DATA 


add_to_hist+O001A ADDO.L #1,D1 
add_to_his+001C BRA,B tadd_to_history+0006 
add_to_hist+O01E -MOVEA,L ********,A0 
add_to_hist+0006 MOVEA,L #00005478,A0 
user prog read 0000 
user prog read 5478 
add_to_hist+O00C ADDA.L D1.A0 
add_to_hist+OO0E CMPI.B #20, (AOD) 
user prog read 0020 
add_to_his+0012 BEQ,B tadd_to_history+001E 
add_to_hist+0014 MOVEQ,.L #0000007E,D0 
history_bu+006D user data read 4641 
add_to_hist+0016  CMP.L D1.00 
add_to_his+0018  BLE.B tadd_to_history+001E 


a 
2 
3 
4 
5 
6 
is 
8 


Listing Menu 


Solutions for CPU32 107 


Chapter 4: Analyzing the CPU32 with a Logic Analyzer 
Using the Inverse Assembler 


Displaying Data with the Agilent Technologies B4620B 
Source Correlation Tool Set 


Source correlation correlates the addresses from the trace listing with 
the high-level code execution. The figure below shows execution of 
data that is correlated to the data shown on the previous page. 


File Options Trace 


Previgete J) __fen JD 
Step Source 


To Captured Source Line 
[Preise JL toe —]| 


Displayed File: “hplogic/demo/cpu32/update_sys,c 


7* printf(" %,75s\n ", 
graph_str); #7 
FFlush stdout): 


void 
add_to_history(control_value?) 
char control_value: 

£ 


story_bufferlil |= "7 7) aa fi HIST_LENGTH-2)> > 


i++; 
history_bufferlil] = control_value: 


LEER REE ERLE ERLE EERE ERLE ERLE EERE ERLE EERE ERK E ERAS ERE RRA E RRR EERRARER RRS 
Identification strings to indicate revision level and origin of this file 


* 

* 

* MKT; @(#) B14d68-11027 A,05,00 68000 DEMO FILES 22Jun92 Unreleased 
* CPR:@¢#)Copyright Hewlett-Packard Co, 1992 

* @¢#) MP: K64742DEM0 0,36 22Jun92 20:00 

* @(SUBID) MAIN: /lsd/demo/debug_env/hp64742 0,22 22Jun92 20:00 

* 


KEKE KK KKK KEKE EKER EKER EKER ERE EERE ER ERE EERE EERE EERE LEK E KEKE RRR RRR RRR EEES 


Source Correlation Tool Set Data 
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To align the inverse assembler 


The CPU82 microcontroller does not indicate externally which word 
fetched is the beginning of a new instruction. You may have to "point" 
to the first state of an instruction fetch to align the inverse assembler. 
Once aligned, the inverse assembler will disassemble from this state 
through the end of the screen. 


Use the following procedure to align the inverse assembler: 


Select a line on the display that you know contains the first word 
of an instruction fetch. 


Roll this line to the top of the display. 


Do not roll the instruction to the line number field at the left center 
screen. In the Listing Menu figure on page 107, line 1 is the top of 
the display. 


Select the appropriate field for your analyzer. 


a For the Agilent Technologies 16600/700 series analyzers, 
select "Invasm," then select "Align." 


b For the other logic analyzers, select "Invasm Options" and use 
the "Code Synchronization" submenu. 


Select "Align." 


The listing inverse assembles from the top line down. Any data before 
the top of the display is left unchanged. 


The listing will inverse assemble from the top line down. Any data 
before this screen is left unchanged. Rolling the screen up will inverse 
assemble the lines as they appear on the bottom of the screen. If you 
jump to another area of the listing by entering a new line number or by 
rolling the screen down, you may have to re-synchronize the inverse 
assembler by repeating the described steps. 


Each time you inverse assemble a block of memory, the analyzer will 
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keep that block in the inverse assembled condition. You can inverse 
assemble several different blocks in the analyzer memory, but the 
activity between those blocks will not be inverse assembled. 


Inverse assembler output format 


The following paragraphs explain the operation of the inverse 
assembler and the results you can expect under certain conditions. 


Numeric Format 


Unless a value is followed by a suffix character, numeric output from 
the inverse assembler is in hexadecimal format. For example, decimal 
values have a period (.) as the suffix character; binary values have a 
percent sign (%). 


Missing Opcodes/Operands 


Asterisks (*) in the inverse assembler output indicate missing 
operands. Missing operands occur frequently and are primarily due to 
microcontroller activity. Storage qualification or the use of storage 
windows can also lead to such occurrences. 


Don’t Care Bytes 


The CPU32 microcontroller can perform byte transfers. During 
operand reads and writes, entire 16-bit (word) values appear on the 
microcontroller data bus lines. The inverse assembler will attempt to 
display "xx" for any bytes in a transfer that are invalid. You can then 
determine exactly which byte of data was used as an operand. If the 
microcontroller is configured such that the number of bytes being 
transferred cannot be determined, an entire word will be displayed. 
You must then determine which bytes are valid. 
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Unexecuted Prefetched Instructions 


Prefetched instructions which are not executed by the microcontroller 
are marked by a hyphen "-" in the first column of the mnemonic/hex 
field. 


The logic analyzer captures prefetches even if they are not executed. 
Care must be taken when specifying a trigger condition or a storage 
qualification that follows an instruction that may cause branching. An 
unused prefetch may generate an unwanted trigger. 


Since the microcontroller only prefetches at most two words, one 
technique to avoid unwanted triggering from unused prefetches is to 
add "4" to the trigger address. This trigger condition will only be 
satisfied if the branch is not taken. 


Processor-Specific Output Format 


The logic analyzer captures all bus cycles. This includes background 
and coprocessor cycles as well as code cycles. 


A'"c" marks coprocessor activity, and background activity is marked 
with a"b". The "c" and "b" are displayed in the first column of the 
mnemonic/hex field. Acquisitions of coprocessor and background 
cycles may be individually enabled/disabled via clock qualifiers (with 
an Agilent Technologies 16600A/700A-series logic analysis system, 
select the Format tab and click Master Clock...). 


General Missing Terms 


Depending on the configuration of the microcontroller, the inverse 
assembler may be unable to supply all the of the information it can 
supply. For example, if ~DS (data strobe) is not valid, internal cycles 
cannot be captured. 
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To use the Invasm menu 


The Invasm menu provides three choices: Load, Filter, and Options. 
These dialogs assist in analyzing and displaying data. Access the 
Invasm menu in the Listing window. 


The following sections describe these dialogs. 


Load 


The Load dialog lets you load a different inverse assembler and apply it 
to the data in the Listing menu. In some cases you may have acquired 
raw data; you can use the Load dialog to apply an inverse assembler to 
that data. 

Display Filtering 


The inverse assembler lets you Show or Suppress several types of 
cycles. This allows you to focus on and display more cycles of interest. 
The figure below shows the Filter menu. 


CPUS2 Filter Options 
Frame 10:Slot B:CPU32 
Program Reads 


Extension Words: Show All a 
Unexecuted Prefetches: Show All 2 
Branches? Show All a 
Calls and Returns? Show All a 


Other Instructions: Show All 


Data Reads? Show All © 


Data Writes: Show All 
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The show/suppress settings do not affect the data that is stored by the 
logic analyzer; they only affect whether that data is displayed or not. 
You can examine the same data with different settings, for different 
analysis requirements. 


This dialog allows faster analysis in two ways. First, you can filter 
unneeded information out of the display. For example, suppressing 
unexecuted prefetches will show only states in which prefetches were 
completed. 


Second, you can isolate particular operations by suppressing all other 
operations. For example, you can show Calls and Returns, with all 
other states suppressed, allowing quick analysis of Calls and Returns. 


The following cycles can be shown or suppressed: extension words, 
unexecuted prefetches, branches, calls and returns, other instructions, 
data reads, and data writes. 


Extension words and unexecuted fetches are suppressed without 
regard to user mode or supervisor mode because they do not affect the 
display of executed mnemonics. 


All other categories may suppress based on the user mode, supervisor 
mode, or both. These categories suppress actual executed mnemonics 
for the display. 


Options 
The Options menu lets you change the width of the display. 
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Inverse assembler error messages 


Any of the following list of error messages may appear during analysis 
of your target software. Included with each message is a brief 
explanation. 


Fatal Data 
Error Displayed if the trace memory could not be read properly 
on entry into the inverse assembler. 


Illegal Opcode 


<code> Displayed if the inverse assembler encounters an illegal 
instruction. 

Reserved 

Opcode Displayed if the inverse assembler encounters a reserved 


coprocessor instruction. 


Incomplete 

Opcode Displayed if the inverse assembly cannot acquire all words 
of a multi-word instruction. 

* (asterisk) Displayed if the inverse assembler cannot find a complete 


operand field for an instruction. Prefetch activity or storage 
qualification is often the cause. 
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Symbols and Source Code in the Analyzer 


Symbols are more easily recognized than hexadecimal address values 
in logic analyzer trace displays, and they are easier to remember when 
setting up triggers. 


Agilent Technologies logic analyzers let you assign user-defined symbol 
names to particular label values. 


Also, you can download symbols from certain object file formats into 
Agilent Technologies logic analyzers. 


When source file line number symbols are downloaded to the logic 
analyzer, you can set up triggers on source lines. The Agilent 
Technologies B4620B Source Correlation Tool Set also lets you display 
the high-level source code associated with captured data. 


After describing user-defined symbols, the rest of this chapter 
describes the requirements and considerations for displaying object file 
symbols and source code for address values captured by a logic 
analyzer. 
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User-Defined Symbols 


User-defined symbols are symbols you create from within the logic 
analyzer user interface by assigning symbol names to label values. 
Typically, you assign symbol names to address label values, but you can 
define symbols for data, status, or other label values as well. 


User-defined symbols are saved with the logic analyzer configuration. 


Predefined CPU32 Symbols 


If you’re using an analysis probe for a CPU32 microcontroller, the logic 
analyzer configuration files include predefined symbols. 


These symbols appear along with the other user-defined symbols in the 
logic analyzer. 


The predefined symbols are listed on page 104. 
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Object File Symbols 


The most common way to load program symbols into the logic analyzer 
is from an object file that is created when the program is compiled. 


Requirements 


In order for object file symbols and source code to be accurately 
assigned to address values captured by the logic analyzer, you need: 


An accurate bus trace 

An Agilent Technologies analysis probe is used to capture the 
microcontroller data. 

An inverse assembler 


The inverse assembler software is included with Agilent Technologies 
analysis probes. The CPU32 inverse assembler decodes captured data 
into program counter (PC) addresses (also known as software 
addresses) and assembly language mnemonics. 


A symbol file 


You need an object file containing symbolic debug information in a 
format the logic analyzer understands. 


Alternatively, you can use a General Purpose ASCII (GPA) symbol file 
(see Chapter 11, “General-Purpose ASCH (GPA) Symbol File Format,” 
beginning on page 245). 


Visible internal cycles 


To store internal cycles in the trace, enable Show Cycles (SHEN) in the 
Module Configuration Register (MCR). 
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To use object file symbols in the Agilent 
Technologies 16600A/700A 


To load symbols in the Agilent Technologies 16600A/16700A-series 
logic analysis system, open the logic analyzer module’s Setup window 
and select the Symbol tab; then, select the Object File tab. Make sure 
the label is ADDR. From this dialog you can select object files and load 
their symbol information. 


Config || Format | Trigger Symbol ] 
Object File | User Defined | 


a 


Label: ADDR 
Load This Object/Symbol File For Label ADDR: 
|Vhplogic/configs.test/patu/0/a. elf Browse... 


Object Files with Symbols Loaded 
hplovic/configs_test/patu/O/q. elf 


When you load object file symbols into a logic analyzer, a database of 
symbol/line number to address assignments is generated from the 
object file. The Symbol Selector dialog allows you to use a symbol in 
place of a hexadecimal value when when defining trigger patterns, 
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trigger ranges, and so on. 


| 


: | 


eS 


eooeeeee| 4 Bute] Besioning | 
LK ances | ele 


If your language tool is not one of those listed on page 120, you can 
create a symbol file in the General-Purpose ASCII (GPA) file format 
(refer to the “General-Purpose ASCII (GPA) File Format” chapter). 


If you have an Agilent Technologies 16600A/700A-series logic analysis 
system, see the online help for more information on how to load 
symbols. 


If you have another logic analyzer refer to your logic analyzer 
documentation for information on how to load symbol files. 


Compilers 


The following CPU32 compilers and their ELF/DWARF or IKEE-695 
format object files can be used with Agilent Technologies logic 
analyzers and the Agilent Technologies B4620B Source Correlation 
Tool Set: 
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Object File Formats 


Language System & Version Format 
Diab Data version 4.la ELF/DWARF 
Green Hills version 1.8.8 TEEE-695 
Microtec Research, Inc. TEEE-695 


mec68k ver. 4.6G, asm68k ver. 7.1 


In order to use symbols in the logic analyzer, file name and line number 
information must be present in the object file. Your compiler may have 
options that include or exclude this information. 


Limitations: For C++ files, symbols are not demangled. Mangled names 
are available for use and the trace listing will still correctly correlate to 
the appropriate source file lines. 


When compiling code, if possible, specify that code and data be put in 
different memory ‘blocks’. A ‘block’ is 32 Kbytes. 32 Kbytes is the 
smallest area of memory that can be distinguished by each memory 
block. 


It is also useful to put the stack in the data block. 


By separating the code and data in this way, the inverse assembler can 
be configured to properly decode both code and data. 


Contact your Agilent Technologies sales engineer to find out if there 
are other compilers for CPU32 microcontrollers that can be used with 
Agilent Technologies logic analyzers. 
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Diab Data Compiler Options 
The following options should be used: 


-g Specifies to generate symbolic debugger 
information (same as -g2). 


-WDDOBJECT=F Specifies the ELF/DWAPF file format. 
-WDDENVIRON=cross Specifies the cross development environment. 
-WDDTARGET=MC683* Specifies CPU32 processor. 
-Xdebug-mode=O0xff Turns off Diab Data extensions to the file format. 


Diab Data provides a utility that you can use to generate the compiler 
options you need. Enter detrl1 -t and follow the instructions. When 
it is finished, it will present you with a string that you can use for the 
compiler options. 


Please refer to the language tool supplier’s documentation for more 
information about the options available. 


More information is available on the World Wide Web at: http:// 
www.diabdata.com 
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Green Hills Compiler Options 
The following options should be used: 


-nodbg Specifies not to use Green Hills proprietary debug 
information; instead use DWARF style debugging 
information. 

-G Generates extended debugging information. 

-cpu=6833x Specifies code generation for the 6833x processor. 


A COFF file is generated. You must then use the coff695 converter to 
get an IEEE-695 file. 


If you are using the Green Hills MULTI builder interface, use the 
following selections: 


Options—File Options, select Generates extended debugging 

“Debugging Level MULTI” information. 

Options CPU, select processor Specifies code generation for the CPU32 
processor. 

Options>Advanced—IEEE695 Generate IEEE-695 file format. You must 
create a COFF file before generating the 
IEEE-695 file. 


Refer to the debugger information beginning on page 192 for more 
information on the compiler options required to use the debugger with 
the emulation module. Those options may be different than the options 
required for the Agilent Technologies B4620B Source Correlation Tool 
Set. For example, do not use the “-nodbg” compiler option for an object 
file intended for use with the MULTI debugger. If you are using source 
correlation and the debugger, generate two object files. 


Please refer to the language tool supplier’s documentation for more 
information about the options available. More information is available 
on the World Wide Web at: http://www.ghs.com 
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Microtec Research Inc. Compiler Options 


The following options should be used: 
-g Specifies to generate debugging information. 


Please refer to the language tool supplier’s documentation for more 
information about the options available. 


More information is available on the World Wide Web at: 
http://www.mentorg.com/microtec 


124 Solutions for CPU32 


Chapter 5: Symbols and Source Code in the Analyzer 
Source Code 


Source Code 
The Agilent Technologies B4620B Source Correlation Tool Set lets you: 
e View the high-level source code associated with captured data. 


e Set up triggers based on source code. 


The source correlation tool set correlates the logic analyzer’s address 
label with a line of high-level source code whose address, symbol name, 
file name, and line numbers are described in a symbol file downloaded 
to the logic analyzer. 


If you purchased a solution, the Agilent Technologies B4620B Source 
Correlation Tool Set was included. Otherwise, the source correlation 
tool set is available as an add-on product for the Agilent Technologies 
16600A/16700A-series logic analysis system and must be licensed 
before you can use it (see the System Admin dialogs for information on 
licensing). 


Source Viewer<1 > 


¢7* Ramp the temperature and humidity targets up and d 


s (temp_dir == up?) 


line # 81 


See Also More information on configuring and using the source correlation tool 
set can be found in the online help for your logic analysis system. 
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Requirements for source correlation 


The source correlation tool set works with many microcontrollers and 
their embedded software development environments. 


However, the overall effectiveness of the source correlation tool set will 
vary to some degree depending on the specific development 
environment it is being used in. The following areas affect the 
performance of the source correlation tool set for different 
development environments: 


Analysis probe and inverse assembler. 


All the information needed to reconstruct the complete address bus of the 
target system must be acquired by the logic analyzer. The 
Agilent Technologies E2480A analysis probe meets this requirement. 


The logic analyzer’s inverse assembler may need to reconstruct any 
incomplete address bus information and/or filter out any unexecuted 
instructions. 


When displaying the next or previous instances of a source line, the Source 
Viewer display uses the PC or SW_ADDR (Software Address) label 
generated by the inverse assembler. 


Object file symbols. 


The source correlation tool set requires that symbols be loaded into the 
logic analyzer (refer to the “Object File Symbols” section earlier in this 
chapter). 


The compiler needs to produce an object file format that is readable by the 
logic analyzer; otherwise; a general-purpose ASCII (GPA) format file needs 
to be generated. 


Access to source code files. 


The source correlation tool set requires that you give the logic analysis 
system access to your program’s high-level source files (either by NFS 
mounting the file system that contains the source files or by copying 
source files to the logic analysis system disk). 
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Inverse Assembler Generated PC (Software 
Address) Label 


In the Agilent Technologies 16600A/16700A-series logic analysis 
system, the CPU32 inverse assembler generates a “PC” label. The PC 
label is displayed as another column in the Listing tool. This label is 
also known as the Software Address generated by the inverse 
assembler. 


The “Goto this line in listing” commands in the Agilent Technologies 
16600A/16700A-series logic analysis system perform a pattern search 
on the PC label in the Listing display (when an inverse assembler is 
loaded). Because the inverse assembler is called for each line that is 
searched, the search can be slow, especially with a deep memory logic 
analyzer. 


Also, a single source code line will generate many assembly 
instructions. The “Goto this line in listing” commands will not find a 
given source code line unless the first assembly instruction generated 
from the source line has been acquired by the logic analyzer. 


For example, if the compiler unrolls a loop in the source code, the trace 
could begin after the first assembly instruction of the loop has been 
executed. A “Goto this line in listing” command would not find the 
source line. 
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Access to Source Code Files 


The source correlation tool set must be able to access the high-level 
source code files referenced by the symbol information so that these 
source files can be displayed next to and correlated with the logic 
analyzer’s execution trace acquisition. This requires you to be aware of 
a number of issues. 


Source File Search Path 


Verify that the correct file search paths for the source code have been 
entered into the source correlation tool set. The Agilent Technologies 
B4620B Source Correlation Tool Set can often read and access the 
correct source code file from information contained in the symbol file, 
if the source code files have not been moved since they were compiled. 


Network Access to Source Files 


If source code files are being accessed across a network, the logic 
analyzer networking must be compatible with the network 
environment. Agilent Technologies logic analyzers currently support 
Ethernet networks running a TCP/IP protocol and support ftp, telnet, 
NFS client/server and X-Window client/server applications. Some PC 
networks may require extensions to the normal LAN protocols to 
support the TCP/IP protocol and/or these networking applications. 
Contact your LAN administrator to help set up the logic analyzer on the 
network. 


Source File Version Control 


If the source code files are under a source code or version control 
utility, check the file names and paths carefully. These utilities can 
change source code file paths and file names. If these names are 
changed from the names in the symbol file, the source correlation tool 
set will not be able to find the proper source code file. Version control 
utilities usually provide an “export” command that creates a set of 
source code files with unmodified names. The source correlation tool 
set can then be given the correct path to these files. 
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Triggering on Symbols and Source Code 


When setting up trigger specifications to capture processor execution: 
e Use the logic analyzer trigger alignment to avoid missed triggers. 
e Use the logic analyzer address offset to compensate for relocated code. 


e Use the logic analyzer storage qualification to capture the software 
execution you're interested in and filter out library code execution (whose 
source file lookups can take a long time if the library source code is not 
available). 


To avoid triggering on prefetched instructions 


A CPU82 microcontroller may prefetch one instruction following a 
taken branch (BRx, JMP, JSR). The preprocessor does not filter these 
prefetches. This means that the prefetched states will be collected by 
the analyzer, and that a trigger set to the address of the prefetched 
instruction will cause a false trigger on the prefetch. 


The recommended way to avoid false triggering for a CPU32 device (16 
bit data bus) in this case is to offset the address of the trigger by 4. An 
offset field is provided in the symbolic trigger menu to allow offsetting 
the symbol address. 


Note that this is not a foolproof scheme, since this may result in an 
inappropriate trigger if the offset address is a point where control 
transfers (branch destination). Be aware of prefetches and adjust your 
triggering to compensate for it as you gain experience with the 
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processor and your code. 


Example 


A common example of this is setting a trigger on the source line 
following a loop, for instance: 


Line # Addr C source Assembly Source 
100 1000 for (i=0;i<10;i++) 
1000 MOVEQ #0,D3 
101 1002 { 
1002 forLoop1: 
102 1002 foo = foo + 100; 
1002 ADD.L #100,D2 
103 1008 } 
1008 ADDQ.L #1,D3 
100A CMP .L #10,D3 
1010 BLT forLoop1 
104 1012 printf£("%d\n", foo); 
1012 -MOVEA.L D2,A0 


The instruction at 1012 will be prefetched following the BLT at 
address 1010. So, setting a trigger on line #104 (address 1012) 
will result in a premature trigger. 


To correlate relocatable code using the address 
offset 


You need to adjust the source correlation tool set to compensate for 
relocatable code segments or memory management units that produce 
fixed code offsets. 


The offset field in the trigger menu allows you to offset the symbol 
address. Entering the appropriate address offset will cause the source 
correlation tool set to reference the correct symbol information for the 
relocatable or offset code. 


To adjust for prefetches, use a trigger offset of 4 (prefetch queue 
depth) to avoid triggering on prefetched instructions. This is not a 
foolproof scheme, since this may result in a missed trigger if a branch 
takes place between the base address and the offset address. For the 
CPU32, an offset of 4 is large enough to overcome the prefetch queue. 
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Connecting and Configuring the Emulation 
Module 


This chapter shows you how to connect the emulation module to the 
target system and how to configure the emulation module and target. 


Here is asummary of the steps for connecting and configuring the 
emulation module: 


Make sure the target system is designed to work properly with 
the emulation module. (page 138) 


Install the emulation module in your logic analysis system, if 
necessary. (page 142) 


If you are connecting to an Agilent Technologies 16600A/700A-series 
logic analysis system, use the Setup Assistant to guide you through 
steps 3-6 (see page 19). Use this manual for additional information, if 
desired. 


Connect the emulation module to your target system using the 
50-pin cable and the TIM or an analysis probe. (page 147) 


Update the firmware of the emulation module, if necessary. (page 
152) 


Verify communication between the emulation module and the 
target. (page 153) 


Configure the emulation module. (page 154) 


Test the connection between the emulation module and the 
target. (page 165) 


Connect a debugger to the emulation module, if applicable. (page 
181.) 


Chapter 8, “Using the Emulator with a Debugger,” beginning on page 
181 for information on configuration with a debugger, and on 
configuring LAN port numbers. 
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Using the Emulation Control Interface 


The Emulation Control Interface in your Agilent Technologies 16600A/ 
700A-series logic analysis system allows you to control an emulator (an 
emulation module or an emulation probe). 


As you set up the emulation module, you will use the Emulation 
Control Interface to: 


e Update firmware (which reloads or changes the processor-specific 
personality of the emulator). 


e Change the LAN port assignment (rarely necessary). 
e Run performance verification tests on the emulator. 
The Emulation Control Interface allows you to: 

e Run, break, reset, and step the target processor. 

e Set and clear breakpoints. 

e Read and write registers. 

e Read and write memory. 

e Read and write I/O memory. 

e View memory in mnemonic form. 

e Read and write the emulator configuration. 


¢ Download programs (in Motorola S-Record or Intel Hex format) to the 
target system RAM or ROM. 


e View emulator status and errors. 
e Write and play back emulator command script files. 


If you have an emulation probe, this interface also allows you to 
configure the LAN address of the emulation probe. 


Using the logic analysis system’s intermodule bus does not require the 
Emulation Control Interface to be running. If the emulation module 
icon is in the Intermodule window, then it will be able to send and 
receive signals. Therefore if you are using a debugger, you can use an 
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analyzer to cause a break. 


Using a debugger with the Emulation Control Interface is not 
recommended because: 


e The interfaces can get out of synchronization when commands are issued 
from both interfaces. This causes windows to be out-of-date and can cause 
confusion. 


e Most debuggers cannot tolerate another interface issuing commands and 
may not start properly if another interface is running. 


See Also All of the Emulation Control Interface windows provide online help 
with a Help button or a Help—On this window menu selection. Refer 
to the online help for complete details about how to use a particular 
window. 
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To start the Emulation Control Interface from 
the main System window 


1 In the System window, click the emulation module icon. 


2 Select Start Session.... 


Slot 1 
Emulation Module 


_ Start Session... 

a Update Firmware... 
Performance Verification... 
Help... 


To start the Emulation Control Interface from 
the Workspace window 


1 Open the Workspace window. 


2 Drag the Emulator icon onto the workspace. 
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3 Right-click on the Emulator icon, then select Start Session.... 
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To start the Emulation Control Interface from 
the Workspace window for an emulation probe 


If you have a stand-alone emulation probe connected to the logic 
analysis system via LAN, use the Emulation Probe icon instead of the 
Emulator icon. 


1 Open the Workspace window. 
2 Drag the Emulation Probe icon onto the workspace. 


3 Right-click on the Emulation Probe icon, then select Start 
Session.... 


a 


4 In the Session window, enter the IP address or LAN name of the 
emulation probe, then click Start Session. 
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Designing a Target System for the Emulation 
Module 


Debug port connections 


If you plan to connect the emulation module directly to the target 
system, the target system should have a debug port (BDM) connector. 


The connector should be a dual row header strip (“Berg connector”), 
10 pins per inch, with 25 mil pins. 


Some of the signals at the BDM port share the same lines, as shown in 
the diagrams on the following pages. 


When deciding whether to use an 8-pin or a 10-pin BDM port, consider 
how often you are likely to encounter "hung" bus cycles. If you are 
using an 8-pin BDM port, and a target bus cycle fails to terminate, you 
will need to reset the target system. If you use a 10-pin BDM port, the 
emulator will detect and terminate the "hung" cycle. 


Therefore if your target system does not have a good bus monitor, or if 
you are not using the built-in bus monitor, you should use a 10-pin 
BDM port to take advantage of the DS and BERR signals. 


The emulation module adds about 40 pF to all target system signals 
routed to the debug connector. This added capacitance may reduce the 
rise time of some signals beyond the processor specifications. If so, the 
target may need to increase the pull-up current on these signal lines. 
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The following signals should be available at the BDM port: 


BDM signal definitions 


Mnemonic Name Direction Signal Description 
GND Ground 
BKPT Breakpoint Input Signals a hardware breakpoint. Also used to 
(to target) place the CPU32 in background debug mode. 
Active low 
DSCLK Development Input Serial input clock 
system clock 
FREEZE Freeze Output Indicates BDM mode 
QUOT Quotient out Output Quotient bit of the polynomial divider. Not used in 
BDM mode. 
RESET Reset Output Indicates system reset 
IFETCH Instruction fetch Output Indicates when the CPU is performing an 
instruction word prefetch and when the 
instruction pipeline has been flushed (active low) 
DSI Development Input BDM data input 
serial in 
Vpp Output Target power (+5 V or +3.3 V) 
IPIPE Instruction pipe Output Used to track the movement of words through the 
instruction pipeline (active low) 
DSO Development Output BDM data output 
serial out 
DS Data strobe Output During read, indicates ready to receive valid data; 
during write 
BERR Bus error Input Used to terminate target memory cycles (optional) 


Solutions for CPU32 


139 


Chapter 6: Connecting and Configuring the Emulation Module 
Designing a Target System for the Emulation Module 


8-pin BDM port 


An 8-pin BDM port should be a dual row header strip ("Berg 
connector"), 4 pins per row, 10 pins per inch, with 25 mil pins. If you 
plan to use the 10-pin cable, use a header with 2 rows of 5 pins. 


If you plan to make an 8-pin cable, you should use the following pin 
assignments for the BDM port: 


GND 1| OO] 2 BKPT/DSCLK 

GND 3 4 FREEZE/QUO 
RESET 5 6 IFETCH/DS| 

DD 8 IPIP DSO 


10-pin BDM port 


If you plan to use the provided 10-pin cable, you should use the 
following pin assignments for the BDM port: 


DS 1/0 UU} 2 BERR 
GND 4 BKF ISCLK 
SND 5} UO OU 6 FREEZE/QUO0 
RESET 7 8 IFETCH/DS 
op 9| OO] 10 PIPE/DSO 
Target Vpp 


The emulator may draw up to 10 mA from target Vpp. 


See page 244 for more information on current and voltage 
requirements. 
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Enabling BDM 


Your target system does not need to enable background debug mode. 


If the emulator is connected before you turn on the target system, the 
emulator will enable BDM. 


If you connect the emulator after you turn on the target system, the 
emulator will enable BDM when the target is reset. 
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Installing the Emulation Module 


Your emulation module may already be installed in your logic analysis 
system. If you need to install an emulation module yourself, follow the 
instructions on the pages which follow. 


These instructions are for trained service personnel. To avoid dangerous 
electric shock, do not perform any service unless qualified to do so. Do not 
attempt internal service or adjustment unless another person, capable of 
rendering first aid and resuscitation, is present. 


Electrostatic discharge can damage electronic components. Use grounded 
wrist straps and mats when you handle modules. 
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To install the emulation module in a 16700A- 
series logic analysis system or a 16701A 
expansion frame 


You will need T-10 and T-15 Torx screw drivers (supplied with the 
module). 


Turn off the logic analysis system and REMOVE THE POWER 
CORD. 


Remove any other cables (including mouse or video monitor cables). 


2 Turn the logic analysis system frame upside-down. 


Remove the bottom cover. 


Remove the slot cover. 


You may use either slot. 
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5 Install the emulation module. 


6 Connect the cable and re-install the screws. 


You may connect the cable to either of the two connectors. If you have 
two emulation modules, note that many debuggers will work only with 
the “first” module: the one toward the top of the frame (“Slot 1”), 
plugged into the connector nearest the back of the frame. 


7 Reinstall the bottom cover, then turn the frame right-side-up. 


8 Plug in the power cord, reconnect the other cables, and turn on 


the logic analysis system. 


The new emulation module will be shown in the system window. 


See Also See page 152 for information on giving the emulation module a 


“personality” for your target processor. 
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To install the emulation module in a 16600A- 
series logic analysis system 


You will need T-8, T-10, and T-15 Torx screw drivers (supplied with the 
emulation module). 


1 Turn off the logic analysis system and REMOVE THE POWER 
CORD. 


Remove any other cables (such as probes, mouse, or video monitor). 


2 Slide the cover back. 
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Install the emulation module. 


Connect the cable and re-install the screws. 


Reinstall the cover. 
Tighten the screws snugly (2 N-m or 18 inch-pounds). 


Plug in the power cord, reconnect the other cables, and turn on 
the logic analysis system. 


The new emulation module will be shown in the system window. 


See page 152 for information on giving the emulation module a 
“personality” for your target processor. 


To test the emulation module 


If this is the first time that you have used the emulation module, you 
should run the built-in performance verification test before you 
connect to a target system. Refer to page 284 for information on 
performance verification. 
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Connecting the Emulation Module to the Target 
System 


Choose one of the following methods for connecting the emulation 
module to a target system. 


e Directly through a debug port connector on the target board. 


16700A 


Emulatior 


Module 


23458210 


e Through an Agilent Technologies E2480A analysis probe, which provides a 
direct connection to the debug port pins. 


Logic Analysis System 
(rear view) \ es 
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After you have connected the emulation module to your target system, 
you may need to update the firmware in the emulation module. 


For information on designing a debug port on your target board, see 
page 138. 


For a list of the parts supplied with the emulation module, see page 25. 


To connect to a target system using a 10-pin 
debug port 


The emulator can be connected to a target system through a 10-pin 
debug port (BDM connector). 


The emulator should be connected to the target system using the 10- 
conductor cable assembly provided. 


In order to connect the emulator to the microcontroller, a 10-pin male 
2x5 header connector must be available on the target system. 


Remove power from the target system and the emulator. 


Plug one end of the 50-pin cable into the emulator. 


Plug the other end of the 50-pin cable into the target interface 
module. 


Plug one end of the 10-pin cable into the target interface module. 
Plug the other end of the 10-pin cable into the target system. 


Orient the red wire toward pin 1 of the connector. 
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CAUTION: Be careful to orient the connector as shown below. If the connector is rotated, 
your target system or the emulation module may be damaged. 


Target System Target Interface Module 


6 Turn on the power to the logic analysis system, then turn on the 
power to the target system. 


See Also “Designing a Target System for the Emulation Module” on page 138. 


To connect to a target system via an 8-pin 
debug port 


1 Remove power from the target system and the emulator. 


2 Plug one end of the 50-pin cable into the emulator. 


3 Plug the other end of the 50-pin cable into the target interface 
module. 
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Plug one end of the 10-pin cable into the target interface module. 
Plug the other end of the 10-pin cable into the target system. 


Orient the red wire toward pin 1 of the connector. Pins 1 and 2 of the 
cable should be the ones which are not connected. Connect pin 3 of the 
cable to pin 1 of the target connector. 


Be careful to orient the connector as shown below. If the connector is rotated, 
your target system or the emulator may be damaged. 


arget System Target Interface Module 


Turn on the power to the logic analysis system, then turn on the 
power to the target system. 


“Designing a Target System for the Emulation Module” on page 138. 
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To connect to a target system using an analysis 
probe 


1 Remove power from the target system. 


2 Plug one end of the 50-pin cable into the emulation module. The 
connectors are Keyed. 


3 Plug the other end of the 50-pin cable into the connector on the 
analysis probe. 
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To update firmware 


After you have connected the emulation module to your target system, 
you may need to update the firmware to give it the right “personality” 
for your processor. You must update the firmware if: 


e The emulation module is being connected to a new analysis probe or TIM, 
or 

e The emulation module was not shipped already installed in the logic 
analysis system, or 

e You have an updated version of the firmware from Agilent Technologies. 


To update the firmware: 
End any run control sessions which may be running. 


In the Workspace window, remove any Emulator icons from the 
workspace. 


Install the firmware onto the logic analysis system’s hard disk, if 
necessary. 


In the system window, click the emulation module and select 
Update Firmware. 


Slot 1 
Emulation Module 


Start Session... 
- Update Firmware... 


Performance Verification... 


Help... 
In the Update Firmware window, select the firmware version to 
load into the emulation module. 
Click Update Firmware. 


In about 20 seconds, the firmware will be installed and the screen will 
update to show the current firmware version. 


Chapter 2, “Installing Software,” beginning on page 29, for instructions 
on how to install the firmware files on the hard disk. 
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To display current firmware version 
information 


e Inthe Update Firmware window, click Display Current Version. 


There are usually two firmware version numbers: one for “Generics” and 
one for the personality of your processor. 


To verify communication between the 
emulator and target system 


Turn on the target system. 
Start the Emulation Control Interface. 


If the the electrical connections are correct, and if the emulator 
firmware and analysis probe or TIM match your target processor, the 
Run Control window should be displayed: 


Run Control - Emulator<1 > |. | OF Xx! 


File Navigate Help 


M68331--Running in monitor 
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Configuring the Emulation Module 


The emulation module has several user-configurable options. These 
options may be customized for specific target systems and saved in 
configuration files for future use. 


The easiest way to configure the emulation module is through the 
Emulation Control Interface in an Agilent Technologies 16600A or 
16700A logic analysis system. 


If you use the Emulation Control Interface, please refer to the online 
help in the Configuration window for information on each of the 
configuration options. 


Other ways to configure the emulation module are by using: 


e the emulation module’s built-in terminal interface 
e your debugger, if it provides an “emulator configuration” window which 
can be used with this Agilent Technologies emulation module 


What can be configured 


The following options can be configured using the Emulation Control 
Interface or using built-in commands: 


e Processor type. 

e Processor clock speed. 

e Initial values for internal registers (see Chapter 7, “Using Internal 
Registers (SIM and EMSIM Registers),” beginning on page 167). 


The following option can be configured using built-in commands: 
e Restriction to real-time runs. 


The built-in “help cf’ command also lists the following options, which 
are provided only for compatibility with standalone emulation probes: 


e BNC break in behavior. 
e BNC trigger out behavior. 
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To configure using the Emulation Control 
Interface 


The easiest way to configure the emulation module is to use the 
Emulation Control Interface. 


1 Start an Emulation Control Interface session. 


In the system window, click the Emulation Control Interface icon, and 
then select Start Session.... 


2 Open a Configuration window. 


Select Configuration... from the Emulation Control Interface icon or 
from the Navigate menu in any Emulation Control Interface window. 


3 Set the configuration options, as needed. 


Configuration changes will take effect when you close the configuration 
window or when you move the mouse pointer outside the window. 


4 Save the configuration settings. 


To save the configuration settings, open the File Manager window and 
click Save.... 
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See Also Help—Help on this window in the Configuration window for 
information on each of the configuration options. 


Help in the Emulation Control Interface menu for help on starting an 
Emulation Control session. 


To configure using the built-in commands 


If you are unable to configure the emulation module with the 
Emulation Control Interface or a debugger interface, you can configure 
the emulation module using the built-in “terminal interface” 
commands. 


1 Connect a telnet session to the emulation module over the LAN. 


For example, on a UNIX system, for an emulation module in Slot 1 
enter: 


telnet LAN address 6472 


2 Enter cf to see the current configuration settings. 


3 Use the c£ command to change the configuration settings. 


See Also Enter help cf for help on the configuration commands. 


For information on connecting using telnet, and for information on 
other built-in commands, see page 277. 
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M>help 
cf - 
(eb3 

cr 


Cha 
(obs 


help 


M> 


Example 


(eb3 


display or set emulation configuration 


<item> 


<item>=<value> - set new <value> for specified <item> 
<item> <item>=<value> <item> - set and display can be combined 


cf <item> - display long help for specified <item> 


To see a complete list of configuration items, type help cé£. This 
command displays: 


--- VALID CONFIGURATION <item> NAMES --- 
proc 
procck 
dprocck 
rrt 
breakin 
trigout 


- display current settings for all config items 
- display current setting for specified <item> 


Set type of CPU16/32 Processor 

Set Clock Speed of Processor 

Display Default Clock Speed of Processor 

Enable or Disable Restriction to Real-Time Runs 
Select BNC break input option 

Select BNC trigger output option 


To configure using a debugger 


Because the Agilent Technologies emulation module can be used with 
several third-party debuggers, specific details for sending the 
configuration commands from the debugger to the emulation module 
cannot be given here. However, all debuggers should provide a way of 
directly entering terminal mode commands to the emulation module. 
Ideally, you would create a file that contains the modified configuration 
entries to be sent to the emulation module at the beginning of each 
debugger session. 


Information about specific debuggers in Chapter 8, “Using the 
Emulator with a Debugger,” beginning on page 181. 


Your debugger manual. 


Solutions for CPU32 157 


Chapter 6: Connecting and Configuring the Emulation Module 
Configuring the Emulation Module 


To configure the processor type 


Processor type configuration 


Value Built-in command Notes 
CPU32 Processor Types 

68330 cf proc=68330 

68331 cf proc=68331 

68332 cf proc=68332 

68333 cf proc=68333 

68334 cf proc=68334 

68335 cf proc=68335 

68336 cf proc=68336 

68338 cf proc=68338 

68340 cf proc=68340 

68341 cf proc=68341 

68349 cf proc=68349 

68360 cf proc=68360 

68376 cf proc=68376 

683xx cf proc=683xx Use for other CPU32 processors 
CPU16 Processor Types 

68hcl16z1 cf proc=68hc16z1 

68hec16z2 cf proc=68hc16z2 

68hcl6yl cf proc=68hcl6yl1 


The cf£save -s command will store this configuration in the 
emulation module’s flash memory. The c£save -r command will 
restore this configuration. 


If you are using a processor in your target that is not listed as a choice, 
the emulator can provide direct access to all the registers defined in 
the CPU82 architecture programming model but will not have direct 
access to memory mapped registers in the processor’s internal 
modules. 


If you are using a processor that is listed as a choice, the emulator will 
have knowledge of on-chip peripheral registers and SIM registers and 
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will allow display and modification from the user interface. For 
example, when 68332 is selected as the processor type, the interface 
will support direct access to the SIM, the QSM, the TPU, and the 
TPURAM registers. 


The emulator does not have explicit support for all CPU32 processors. 
When using a member of the CPU32 family that is not explicitly 
supported it may be possible to select a processor that is a formal 
subset of the unsupported processor. This will provide direct access to 
all of the internal memory mapped registers that are common. Since 
the registers in the internal modules are memory mapped, registers in 
unsupported CPU32 processors are also accessible through the 
memory commands. For example, on a 68332, SIM registers can be 
accessed at memory locations 7FFA00 to 7FFA7F or FFFAOO to 
FFFAT7F. 


To configure the processor clock speed (BDM 
communication speed) 


The maximum communication rate with the target processor through 
the BDM port is based upon the target processor type and the target 
processor clock speed. 


For best performance, set the processor clock speed to the highest 
speed that is equal to or less than the clock speed of the target 
processor. You may set the processor clock speed to a speed lower than 
the actual clock speed of your target system. Use the 25 MHz option for 
microcontrollers running faster than 25 MHz. 


If using the internal clock synthesizer, set the EMSYNCR (EMulator 
copy of the SYNthesizer Control Register, SYNCR) to the same value as 
set by the initialization code. See Chapter 7, “Using Internal Registers 
(SIM and EMSIM Registers),” beginning on page 167. 
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Processor clock speed configuration 


Processor clock 


Value aa nee Built-in command 
33 33 MHz cf procck=33 
25 25 MHz cf procck=25 
20 20 MHz cf procck=20 
16 16 MHz cf procck=16 
8 8 MHz (default) cf procck=8 
4 4 MHz cf procck=4 
2 2 MHz cf procck=2 
1 1 MHz cf procck=1 
512 512 kHz cf£ procck=512 
32 32 kHz cf procck=32 


Use the c£ dprocck command to display the default clock speed. 


To set the default clock rate if the processor 
clock rate is less than 8 MHz 


For an emulation module, the default clock rate must be set using the 
Emulation Control Interface. 


End any Emulation Control Interface session for the emulation 
module. 


Right-click the Emulation Control Interface icon and select 
Update Firmware.... 


Click Modify Lan Port.... 
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4 Select the clock rate. 
5 Click Apply, then click Close. 


If a target system’s processor clock rate is less than 8 MHz following 
powerup, the default clock rate must be set to 131 kHz. 


This can occur when the target system has the processor running off of 
an external clock source that is less than 8 MHz or is using the clock 
synthesizer with a crystal that is lower in frequency that the standard 
crystal. 


The actual processor clock rate should then be communicated to the 
emulator through the configuration processor clock rate entry. The 
emulator will then start communications with the target processor at 
the 131 kHz processor clock rate. When the configuration process is 
complete, the emulator will change the communication rate to a rate 
based on the clock speed (procck). 


The emulator will not communicate correctly with target systems that 
have a processor clock rate slower than 131 kHz. 


Note 


The emulator does not automatically match the communication 
speed to the actual target speed (SYNCR register). Maintaining 
consistency is the responsibility of the user. 


To maintain consistency, specify a correct SYNCR register value in 
the configuration process and make sure that the target code does 
not change the SYNCR register to a value that is slower than what 
is specified in the configuration. 


The emulator will not run correctly of the actual target 
processor Clock rate is slower than the rate specified in the 
configuration. 
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Detailed information about processor clock 
rates 


Most target systems will communicate with the emulator properly and 
with excellent performance following the basic guidelines given in the 
preceding sections. In some target systems, the setting of this 
parameter requires greater knowledge of the actual clock generation 
model. 


The CPU32 family has two major use models for the processor clock 
rate which can be used to support the majority of target systems. When 
using the internal clock synthesizer, the processor will run from reset 
at a Motorola defined default clock rate which, when using the 
Motorola recommended crystal is usually 8.38 MHz or 1/2 of the 
maximum clock rate of the processor. The programmer’s initialization 
code then programs the clock synthesizer to run at the desired clock 
rate which is usually higher than the default. The second model uses an 
external clock source to directly control the processor clock rate. The 
emulator directly supports both processor clock rate models. Users 
that use a different clock rate model can examine the support of these 
models to determine the correct settings for supporting their processor 
clock rate. 


The emulator supports the use model of the target processor clock rate 
being increased through the configuration. When applying the 
configuration at the start of a user interface or through the 
configuration process, the emulator communicates with the target 
processor at a rate based on the default processor clock rate (either 8 
MHz or 131 kHz). At this default rate, it copies the EMSYNCR 
(EMulator copy of the SYNthesizer Control Register) to the SYNCR 
(SYNthesizer Control Register). The emulator then changes its 
communications rate to the maximum rate that the processor clock 
rate specified in the configuration can support. 


Resetting the target processor also resets the SYNCR to its default 
value. If the target processor is reset while running user code (as 
opposed to putting the processor in a reset state from the interface), 
no communications rate change takes place within the emulator. The 
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initialization code that runs on the target system from reset is required 
to set the SYNCR to the correct value. 


When the target processor clock rate is fixed through the use of an 
external clock source, the Processor Clock Rate parameter can be set 
to the highest rate that is equal to or less than the target clock rate. 
There are no dependencies upon any other configuration parameters. 


For the 6833x interface, when the target system is using the internal 
clock synthesizer to increase the final clock rate but the user leaves the 
emulator at the default processor type (683xx) the EMSYNCR is not 
available to the configuration process. The powerup default clock rate 
for the target system can be entered into the "Processor Clock Rate". 
This is a failsafe setting but can limit the emulator performance if the 
target processor is programmed to run at a significantly faster rate than 
the powerup default. 


If the user desires the higher performance available by setting the 
"Processor Clock Rate" configuration parameter to his final value but 
does not set his processor type (which means that the configuration 
process cannot set the SYNCR) the debugger interface will have a 
number of failures when invoked because it cannot communicate 
accurately with the target processor. These will show up as either 
dashes or bad values in the source, backtrace, and memory windows. 
These errors can be cleared up if the target system can support a "run 
from reset" with code in the target system that initializes the target 
SYNCR register. Following the target initializing this register, a break 
can be requested and the emulator will communicate correctly with the 
target. Until the emulator and the target system are running at 
compatible rates, operations such as "run," "load," "modify memory/ 
registers," or "display memory/registers" will either fail or give incorrect 
information. 


If the user loses communication between the emulator and the target 
system because of incompatible clock rates, control of the target 
processor through the emulator can be recovered by applying the 
configuration to the emulator with the target processor clock rate set 
to a known good value. 
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Configuring the Emulation Module 


To configure restriction to real-time runs 


Real-time runs configuration 


Value Emulation module configuration ean 
command 
no Allows commands which break to the cf rrt=no 
monitor. Examples include commands 
which display memory or registers. 
(Default) 
yes No commands are allowed which cf rrt=yes 


break to the monitor, except “break,” 
“reset,” “run,” or “step.” 
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Testing the emulator and target system 


After you have connected and configured the emulator, you should 
perform some simple tests to verify that everything is working. 


Chapter 13, “Troubleshooting the Emulation Module,” beginning on 
page 273, for information on testing the emulator hardware. 


To test memory accesses 


Start the Emulation Control Interface and configure the 
emulator, if necessary. 


2 Open the Memory window. 


Write individual locations or fill blocks of memory with patterns 
of your choosing. 


The access size is the size of memory access that will be used to write 
or read the memory values. 


Use the Memory I/O window to stimulate I/O locations by reading 
and writing individual memory locations. 


To test with a running program 


To more fully test your target, you can load simple programs and 
execute them. 


Compile or assemble a small program and store it in a Motorola S- 
Record or Intel Hex file. 


Use the Load Executable window to download the program into 
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RAM or flash memory. 


Use the Breakpoints window to set breakpoints. Use the 
Registers window to initialize register values. 


The new register or breakpoint values are sent to the processor when 
you press the Enter key or when you move the cursor out of the 
selected register field. 


In the Run Control window, click Run. 


5 Use the Memory Mnemonic window to view the program and use 


the Memory window to view any output which has been written 
to memory. 
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Internal Registers (SIM and EMSIM Registers) 


The purpose of SIM Registers 


The CPU82 family of processors provides a variety of internal 
peripheral and memory modules that are directly connected to the 
CPU82 core through an internal bus. These modules are configured 
through memory mapped register banks. The base address of the 
register banks as well as the base address of internal memory modules 
are established through Module Configuration Registers (e.g. MCR) 
and Base Address Registers (e.g. CSBARx). A common module 
throughout the family is a System Integration Module (SIM) which 
controls such things as clock speed and external chip selects. 


The purpose of EMSIM registers 


The emulator maintains a set of pseudo registers known as EMSIM 
registers. There is a one to one correspondence between the the 
EMSIM registers and the target SIM registers. The purpose of the 
EMSIM registers is to provide a stable, known set of registers that can 
be copied into the SIM to establish an initial SIM state or re-establish a 
previous known state. This is useful because it allows emulator to 
communicate with a target without first running initialization code to 
set up the chip select registers. 


The names and values of the EMSIM registers are displayed in the 
Configuration window of the Emulation Control Interface. The SIM 
registers can be viewed in the Registers window. 


Note 


The emulator supports configuration of the internal registers in the System 
Integration Module (SIM) and other important Module Configuration Registers 
and Base Address Registers. To simplify the interface, all configurable registers 
will be referred to as SIM registers even if they are technically part of another 
module. 


168 Solutions for CPU32 


Chapter 7: Using Internal Registers (SIM and EMSIM Registers) 
Configuring the SIM Registers 


Configuring the SIM Registers 


Summary 


If you have a boot ROM that initializes the SIM registers, you don’t have 
to configure the EMSIM registers in order to load code and run your 
target. It is a good idea to configure the EMSIM registers anyway, since 
the EMSIM registers are used configure an analysis probe. Page 171 
discusses how to copy the SIM registers into the EMSIM registers. 


If you do not have a boot ROM, then you will need to initialize the 
EMSIM registers first so that you can communicate with the memory of 
the processor. Once the EMSIM registers are defined, then every reset 
followed by a break will write the EMSIM registers to the processor’s 
SIM registers. 


Once you have configured the EMSIM registers, it is a good idea to save 
a configuration. Loading the configuration will restore the values of all 
configuration options, including the EMSIM registers. 


How SIM Register Values are Set 


These registers are typically initialized by the CPU32 executing the 
reset initialization code. During development this code may not be 
available or may not exist on the target system. To aid in development, 
the most important of these registers can be set directly by the 
emulator. This enables such functions as clock speed, chip selects, and 
location of internal memory to be established prior to executing any 
user code. Once these registers are set, resources in the target system 
can be accessed in the same manner as the processor would access 
them after executing the reset initialization code. Activities such as 
downloading code into the target system can now be performed 
through the emulator. 


The emulator copy is identified by the prefix "EM" on the register name 
(e.g. EMSYNCR is the emulator copy of the SYNCR register) and are 
referred to as the EMSIM. The EMSIM registers are transferred to the 
processor registers when the target processor is reset while it is 
running in the BDM monitor. 
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Based on the previous discussion, it should be clear that the EMSIM 
values specified during configuration need to match the intended 
programming and of use of your CPU32 target system. You need to 
carefully decide how the processor will be configured and the 
corresponding SIM values. 


The effect of processor type on the EMSIM 
registers 


EMSIM registers are valid only if the emulator has been configured 
with a target processor name other than 683xx. If the processor is 
683xx, the emulator does not know what type of SIM exists in the 
target and will not display correct values for the SIM registers. 


Using the Emulation Control Interface or built-in 
commands 


If you are using the logic analysis system’s Emulation Control Interface, 
you should use the Emulation Control Interface to work with SIM and 
EMSIM registers. 


If you are using a debugger, use a telnet window or your debugger’s 
“emulator command” window to enter the emulator’s built-in 
commands. 


See “Emulation Module Built-in Commands” on page 277 for more 
information on how to use built-in commands. 
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Configuring EMSIM Register Values 


There are two methods you can use to configure EMSIM register 
values: 


e¢ Copy values from the SIMs into the EMSIM registers, or 
e Manually define each of the EMSIM values. 


This will not change the value of the SIM registers. 


To copy target SIM registers to EMSIM 
registers 


If you have initialization code that properly defines the SIMs, you can 
copy your values of the SIMs into the EMSIM registers. Then you can 
save the EMSIM values in a configuration file. 


Using the Emulation Control Interface: 


In the Configuration window, click the Read Configuration 
button. 


Using the emulator’s built-in commands: 


Enter the syne sim command. 


To manually define EMSIM values 


Using the Emulation Control Interface: 
Open the Configuration window. 


Enter the values for the registers. 
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3 Open the Workspace window and select File>Save 
Configuration.... 


The EMSIM values will be saved as part of the configuration. This 
allows you to restore the EMSIM values by loading the configuration. 
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Configuring SIM Register Values 


There are three ways to configure the values of the SIM registers: 
e Using code in your target’s boot ROM, or 
e Copying values from the EMSIM registers into the SIM registers, or 


e Manually entering the value of each SIM register using the Emulation 
Control Interface 


Some registers can only be written once after processor reset. 


If you set the EMSIM values, then reset and break, the EMSIM values will be 
written to the SIM registers. If your initialization code then attempts to write to 
one of the "write once after reset" registers, the writes will fail. In this case, you 
must run from reset to correctly execute the initialization code. 


To copy EMSIM registers to target SIM 
registers 


You can copy values from the EMSIM registers into the SIM registers in 
three ways: 


Using the Emulation Control Interface: 


In the Configuration window, click the Load Configuration 
button. 


Using the emulator’s built-in commands: 


Enter the syne emsim command. 


By resetting the target: 


Reset the target processor. 
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Break the target processor. 


Some registers can only be written once after processor reset. 


If you set the EMSIM values, then reset and break, the EMSIM values will be 
written to the SIM registers. If your initialization code then attempts to write to 
one of the "write once after reset" registers, the writes will fail. In this case, you 
must run from reset to correctly execute the initialization code. 


To manually define SIM values 


Using the Emulation Control Interface: 
Open the Registers window. 
Enter the values for the registers. 


Once you have entered the values, it is a good idea to copy the SIM 
values to the EMSIM registers and save a configuration. Then you will 
be able to reload the SIM registers without typing all the values again: 


In the Configuration window, click the Read Configuration 
button. 


Open the Workspace window and select File>Save 
Configuration.... 
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Saving and Loading EMSIM Values 


You can use the Emulation Control Interface to save the EMSIM values 
to a configuration file then to restore the EMSIM values. 


The configuration file contains more than just the EMSIM values. 


When you load the configuration, the whole emulator configuration will be 
restored, inclulding all configuration settings, and the locations of windows. 
Intermodule measurement configurations will be lost (unless you save and 
restore with the Source set to All). 


To save EMSIM values in a configuration file 


Open the Workspace window and select File>Save 
Configuration.... 


Set the Source field to the emulator (for example, Motorola 
CPU16/32 BDM Emulator (Slot 1)). 


Select a file name and click Save. 


To load EMSIM values from a configuration file 


Once you have saved the configuration, you can specify the saved 
configuration file and have your EMSIMs set up to the proper values. 


Open the Workspace window and select File>Load 
Configuration.... 


Set the Source field to the emulator (for example, Motorola 
CPU16/32 BDM Emulator (Slot 1)). 
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3 Select a file name and click Load. 


This will not change the SIM registers. To apply the new values to the 
corresponding SIM registers, see “To copy EMSIM registers to target 
SIM registers” on page 173. 
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Configuring SIM and EMSIM Values Using Built- 
In Commands 


To compare SIM and EMSIM registers 


Target SIM registers may compared to the the EMSIM to determine if 
they have changed. The only way to do this is with a built-in command: 


Enter the syne diff command. 


This will display the differences between the SIM and EMSIM register 
sets. 


The emulator, when comparing SIM and EMSIM registers, will not compare 
EMSIM registers that have not been set. 


When you first turn on the emulator and the target system, syne diff will not 
find any differences. If one register is modified, just that one register may show 
differences. A complete check of the register differences will occur only if a 
complete configuration is loaded or the SIM registers are copied to the EMSIM 
registers. 


Solutions for CPU32 177 


Chapter 7: Using Internal Registers (SIM and EMSIM Registers) 
Configuring SIM and EMSIM Values Using Built-In Commands 


Summary of EMSIM-related built-in commands 


Command Meaning 


sync sim Copy values from SIM registers to EMSIM registers 


sync emsim Copy values from EMSIM registers to SIM registers 


sync diff Display differences between SIM and EMSIM registers 
reset Reset, break, and copy values from EMSIM registers to SIM 
break registers 

See Also Use the help syne command to display help for these commands. 


See “Emulation Module Built-in Commands” on page 277 for more 
information on how to use built-in commands. 
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Internal Representation of SIM and EMSIM 
Registers 


Internal to the emulator the EMSIM and SIM memory spaces are 
accessed using memory suffixes of the form offset@emsim and 
offset@reg. All memory mapped registers in the 683xx family are 
contained within a contiguous 4k block of memory (8k for the 68360). 
The base address is determined by the SIM MCR MM bit in the 6833x or 
the MBAR in the 68340 and 68360 processors. The internal 
representation within the emulator of these registers is maintained as 
an offset to the memory mapped register base. Referencing memory as 
offset@emsim will access a SIM copy value in the EMSIM. Referencing 
offset@reg will access a register within the processor. For example, on 
a 68332 the memory address 00a00@emsim will access the EMSIM 
MCR and 0a00@reg will access the SIM MCR. The memory address 
0@reg within a 68340 will access its SIM MCR. 


The command used to compare the values with the EMSIM and SIM 
will result in memory references using this notation. For example 
suppose the command is given to compare the SIM and EMSIM within 
the 68332. Further suppose that the the values in the Clock 
Synthesizer Control differ. This is the SIM register SYNCR. The 
resulting display may look as follows: 


Oa04@emsim=000, O0a04@reg=03f 
Oa05@emsim=000, Oad5@reg=008 


Refer to the processor data book to understand which SIM register is 
differing. 
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Using the Emulator with a Debugger 


Several prominent companies design and sell state-of-the-art source 
debuggers which work with the Agilent Technologies emulation module 
and emulation probe. 


Benefits of using a debugger 


The debugger will enable you to control the execution of your 
processor from the familiar environment of your debugger. Using a 
debugger lets you step through your code at the source-code level. 


With a debugger connection, you can set breakpoints, single-step 
through source code, examine variables, and modify source code 
variables from the debugger interface. The debugger can also be used 
to download executable code to your target system. 


Using a debugger to connect to the emulator allows the entire design 
team to have a consistent interface from software development to 
hardware/software integration. 


Debugger interfaces must be ordered directly from the debugger 
vendor. 


Compatibility with other logic analysis system tools 


You can use your logic analysis system to collect and analyze trace data 
while you use your debugger. If you are using an X windows 
workstation or a PC with an X terminal emulator, you can display the 
logic analyzer windows right next to your debugger. 
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Here is an example of what the 
might look like: 


sae DERI 
RUN STOP EDIT BRKPT STACK REGISTERS 
Space: :copy(const Space& src 


VOT 


spaceID = -2; // so we can distinguish the copy 
new char[strlen(src.spaceName) ]; 


src.spaceName) ; 


spaceName 
strcpy CspaceName, 


numLinks = src.numLinks; 
for Cint_ i=0; i<numLinks; i++) { 


linksli] = srce.links[i]; 


$ 


// Link this space to another. Sets the link for both. 
void Space::setLinkCint linknum, int backlinknum, Space 
* target) {i 

Tinks[linknum] targe 

target- J Tnketbacklinknund = this; 
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Minimum requirements 

To use a debugger with the emulator, you will need: 

e A debugger which is compatible with the emulator 

e ALAN connection to the PC or workstation that is running the debugger 


e X windows or an X terminal emulator, such as Reflection X on a PC. This is 
required only if you wish to have the logic analysis system user interface 
displayed on your PC or workstation screen, along with the debugger. 


Is your debugger compatible with the emulator? 


Ask your debugger vendor whether the debugger can be used with an 
Agilent Technologies emulation module or emulation probe (also 
known as a "processor probe" or "software probe"). 


LAN connection 


You will use a LAN connection to allow the debugger to communicate 
with the emulator. 


Compatibility with the Emulation Control Interface 


Do not use the logic analysis system’s Emulation Control Interface and 
your debugger at the same time. 
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Setting up Debugger Software 


The instructions in this manual assume that your PC or workstation is 
already connected to the LAN, and that you have already installed the 
debugger software according to the debugger vendor’s documentation. 


To use your debugger with the emulator, follow these general steps: 
e Connect the emulator to your target system (see page 147). 
e Connect the emulator or logic analysis system to the LAN (page 186). 


e Export the logic analysis system's display to your PC or workstation 
(page 190). 


e Configure the emulator (page 154). 


e Begin using your debugger. 


If you use the Emulation Control Interface to configure the emulator, 
remember to end the Emulation Control Interface session before you 
start the debugger. 


CAUTION: Do not use the Emulation Control Interface at the same time as a debugger. 
The Emulation Control Interface and debuggers do not keep track of 
commands issued by other tools. If you use both at the same time, the tools 
may display incorrect information about the state of the processor, possibly 
resulting in lost data. 


See Also Refer to the documentation for your debugger for more information on 
connecting the debugger to the emulator. 
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To connect the logic analysis system to the 
LAN 


Information on setting up a LAN connection is provided in the online 
help or installation manual for your logic analysis system. 


Your debugger will require some information about the LAN connection 
before it can connect to the emulator. This information may include: 


e IP address (Internet address) or LAN name of the logic analysis system. 
e Gateway address of the logic analysis system. 
e Port number of the emulator. 


Port numbers for emulators 


Port number Use for 

Debugger connections 

6470 Slot 1 (First emulator in an Agilent Technologies 1660A/ 
700A-series logic analysis system) 

6474 Slot 2 (Second emulator in an Agilent Technologies 
16700A-series system) 

6478 Slot 3 (Third emulator in an expansion frame) 

6482 Slot 4 (Fourth emulator in an expansion frame) 

Telnet connections 

6472 Slot 1 (First emulator) 

6476 Slot 2 (Second emulator) 

6480 Slot 3 (Third emulator) 

6484 Slot 4 (Fourth emulator) 
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Write the information here for future reference: 
IP Address of Logic Analysis System 

LAN Name of Logic Analysis System 

Gateway Address 

Port Number of Emulator 
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To change the port number of an emulator 


Some debuggers do not provide a means to specify a port number. In 
that case, the debugger will always connect to port 6470 (the first 
emulator). If you need to connect to another module, or if the port 
number of the first module has been changed, you must change the 
port number to be 6470. 


To view or change the port number: 


Click on the emulation module icon in the system window of the 
logic analysis system, then select Update Firmware. 


2 Select Modify Lan Port... 


If necessary, enter the new port number in the Lan Port Address 
field. 


The new port number must be greater than 1024 and must not already 
be assigned to another emulator. 
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To verify communication with the emulator 


1 Telnet to the IP address. 


For example, on a UNIX system, enter “telnet <[P_address> 6472”. 
This connection will give you access to the emulator’s built-in terminal 
interface. You should see a prompt, such as “M>”. 


At the prompt, type: 


ver 


You should then see information about the emulator and firmware 
version. 


To exit from this telnet session, type <CTRL>D at the prompt. 


The online help or manual for your logic analysis system, for 
information on physically connecting the system to the LAN and 
configuring LAN parameters. 


If you have problems verifying LAN communication, see page 283. 
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To export the logic analysis system’s display to 
a workstation 


By exporting the logic analyzer’s display, you can see and use the logic 
analysis system’s windows on the screen of your workstation. To do 
this, you must have telnet software and X window installed on your 
computer. 


On the workstation, add the host name of the logic analysis 
system to the list of systems allowed to make connections: 


xhost +<IP_address> 

Use telnet to connect to the logic analysis system. 
telnet <IP_address> 

Log in as “logic”. 


The logic analysis system will open a Session Manager window on your 
display. 


In the Session Manager, click Start Session on This Display. 


Example 


On a UNIX workstation, you could use the following commands to 
export the display of a logic analysis system named “mylogic”: 


$ xhost +mylogic 

$ telnet mylogic 

IME WALIAG). 2 

Connected to mylogic.mycompany.com. 
Escape character is ‘*]’. 

Local flow control on 

Telnet TERMINAL-SPEED option ON 


Agilent Technologies Logic Analysis System 
Please Log in as: logic [displayname: 0] 


login: logic 
Connection closed by foreign host. 
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To export the logic analysis system’s display to 
a PC 


By exporting the logic analyzer’s display, you can see and use the logic 
analysis system’s windows on the screen of your PC. To do this, you 
must have telnet software and an X terminal emulator installed on your 
computer. The following instructions use the Reflection X emulator 
from WRQ, running on Windows 95, as an example. 


On the PC, start the X terminal emulator software. 

To start Reflection X, click the Reflection X Client Startup icon. 
Start a telnet connection to the logic analysis system. 

Log in as “logic”. 


For Reflection X, enter the following values in the Reflection X Client 
Startup dialog: 


a Inthe Host field, enter the LAN name or IP address of the 
logic analysis system. 


b Inthe User Name field, enter “logic”. 
c Leave the Password field blank. 

d Leave the Command field blank. 

e Click Run to start the connection. 


The logic analysis system will open a Session Manager window on your 
display. 


In the Session Manager window, click Start Session on This 
Display. 
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Using the Green Hills debugger 


Compatibility 


Version 1.8.8.A of the MULTI Development Environment from Green 
Hills Software, Inc. is one of several debuggers which connect to the 
Agilent Technologies emulation module. 


This section provides information that is specific to using MULTI with 
the Agilent Technologies emulation module. It is intended to be used 
in conjunction with the MULTI documentation provided by Green Hills 
Software. 


Overview 


MULTI connects to an emulation module through the Green Hills host- 
resident program (hpserv). 


Host computer : : 
Logic analysis 
system with 


MULTI | sory | emulation 
module 


Getting started 


1 Check that your Emulation Module is programmed with firmware 
for a CPU32 processor. 


Go to the system window of the logic analyzer interface and verify that 
the Emulation Module icon is described as a "Motorola CPU16/32 BDM 
Emulator". If it is not, follow the instructions on page 152 to update 
the firmware. 


2 Build the executable. 
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If you have the demo software shipped with the Green Hills debugger, 
follow these steps: 


a 


Prepare the executable. 


Go to the 68000PC subdirectory where you installed MULTI. Copy the 
default.Ink file to user.Ink. 


Start MULTI. 


On Unix, enter "multi". 
On Windows, double-click the Green Hills icon. 


Set up the MULTI software environment: 


e Replace the project default.bld Gin the Builder dialog box next to the 
project button) with hpdemo/ecs.bld and press ENTER. 

e Make sure the target button on the MULTI window says "cross 68". 

e Inthe Builder window, double-click ecs.bld. 


The box next to the Debug button should display "ecs". The window should 
list the names of the source code files. 


In the Builder menu bar, select Options~CPU, then set the 
processor type. 


In the Builder menu bar, select Options>Advanced, and 
select the default output mode. 


Build the demo program: 


e Inthe Builder window, click the Buildicon. (Or, in the menu bar, select 
Build—Build All.) 

e Close the Progress window when the "Build completed" message is 
displayed. 


Select Options Advanced, and select the IEEE-695 output 
mode to generate an JEEE-695 format file. 


Connect MULTI to the emulation module. 


There are two ways to connect to the emulation module: 


In the Remote box in the MULTI Builder window, enter: 


hpserv IP_address 
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OR 


e Inthe Builder window, click Debug to open the Debugger window, then in 
the Debugger window’s command pane, enter: 


remote hpserv IP_address 


Starting hpserv opens two windows: the Target window and the I/O 
window. Commands entered in the Target window are sent directly to 
the emulation module. 


The I/O window sends input (stdin) to and receives output (stdout) 
from the target program while it is running. 


Note that hpserv connects to the first emulation module (port 6470) in 
a logic analysis system frame. You may specify another port by using 
the -p option with hpserv. See page 186 for more information on port 
numbers. 


Start the debugger. 


If you have not opened the Debugger window yet, click Debug in the 
Builder window. 


Configure the emulation module and target system. 


Before running the target processor, you must configure the Agilent 
Technologies emulation module for your target system. For example, 
you may have to set the BDM clock speed, the reset operation, cache 
disabling, or other configuration parameters. 


If you are unsure of the configuration needed for your emulation 
module, you can use the Configuration window in the logic analysis 
system’s Emulation Control Interface to explore the configuration 
options. 


Once you know the configuration settings needed for your target 
system, you may use one of the following methods to configure the 
emulation module and target system: 


e Use the Configuration window in the logic analysis system’s Emulation 
Control Interface. 

e Enter "cf" commands in the Target window. 

e Use an initialization script. 
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See “To configure the emulation module, analysis probe, and target using 
an initialization script” on page 196 for information on saving the 
configuration commands in a script. 


6 Specify an initialization address for the stack pointer. 


This is required if the stack pointer is neither initialized when the 
processor is reset nor set in the start-up code generated by the 
compiler. If the stack pointer address needs to be initialized: 


e Inthe debugger’s command pane, enter: 
_INIT_SP = <address> 
OR 

e Inthe Target window, enter: 
reg a7=<address> 
OR 

e * Include the following line in an initialization script: 
target reg a7=<address> 

7 Download the code: 
In the Debugger window, select Remote—LoadProgram. 


The Debugger command pane indicates that the code has been 
downloaded to the target. 
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To configure the emulation module, analysis 
probe, and target using an initialization script 


You can use an initialization script to configure the emulation module 
and set up your target system. If you will always be using the same 
configuration, this way will save time and reduce errors. 


Save the configuration commands in a text file, one command 
per line. 


Green Hills provides an example initialization sequence in the file 
hpserv.rc in the "hpdemo" directory. 


To run the script, enter the following command in the Debugger 
command pane: 


<filename 


Example: simple configuration script 
Create a file with the following lines: 


remote hpserv logicl 

target cf proc=68360 

_INIT_ SP=0x10000 

Save the file in the MULTI startup directory and name it hpserv.rc. 
To run the script, enter the following command in the Debugger 
command pane: 


<hpserv.rc 


When run, this script will: 


e Connect to the target through the emulation module in a logic 
analysis system frame called "logic1". 

e Set the processor type. 

e Initialize the stack pointer. 
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Example: script to configure EMSIM and SIM registers 


The following script was written for a target which does not have 
boot ROM and which is connected to an analysis probe. The script 
sets the EMSIM registers, then copies the EMSIM values to the 
target processor (syne emsim) and to the analysis probe (pp 
load) to enable address reconstruction. 


0000@emmbar=01000133 
1000@emsim=00001438F 
1040@emsim=017CD23A0 
1034@emsim=000000000 
1030@emsim=000000000 
1014@emsim=000000000 
1016@emsim=0000000A0 
1026@emsim=00000070F 
102A@emsim=000000000 
1010@emsim=000008000 
1008@emsim=000000084 
100C@emsim=00000008C 
1023@emsim=000000000 
1022@emsim=00000000E 
1050@emsim=000000000 
1060@emsim=0A0000001 
1070@emsim=000000000 
1080@emsim=000000001 
1054@emsim=000000000 
1064@emsim=02FE00000 
1074@emsim=000000000 
1084@emsim=04FE00009 
1090@emsim=000000000 
10A0@emsim=000000000 
10B0@emsim=000000000 
10C0@emsim=000000000 
1094@emsim=0F0000004 
10A4@emsim=0F0000004 
10B4@emsim=0F0000004 
10C4@emsim=0F0000004 


target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d2 
target m -d2 
target m -d2 
target m -d2 
target m -d2 
target m -dl 
target m -dl 
target m -dl 
target m -dl 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target m -d4 
target cf proc=68360 
target sync emsim 
target pp load 
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To perform common debugger tasks 


e To display registers, click the regs button in the Display window. 


e To set a breakpoint, click on the source code line where the breakpoint is 
to be located. 


e To clear a breakpoint, click again on the source line. 
e To step through code, click next. 
e To run from the current PC, click go. 


e To toggle the display between source code and source code interlaced with 
assembly code, click assem. 


e To load program symbols, reset the PC, reset the stack pointer, and run 
from the start, click restart. 


To send commands to the emulation module 


MULTI communicates to the emulation module using the emulation 
module’s "terminal interface" commands. MULTI automatically 
generates and sends the commands required for normal operation. If 
you want to communicate directly with the emulation module during a 
debug session, you may do so using "terminal interface" commands 
through the Target window (which comes up when hpserv is brought 
up). You can also enter these commands from the Debugger window’s 
command pane by preceding the command with the "target" command. 


To view commands sent by MULTI to the 
emulation module 


The communication between MULTI and the emulation module can be 
viewed by running hpserv in a logging mode: 


remote hpserv -dc -a -o <filename> <emulation module> 


The options -de and -da log both asynchronous and console messages 
and the -o <filename> directs these messages to a log file called 
<filename>. When using this option, disconnect from hpserv (to flush 
out the file) and then you may view <ftlename> to see what 
commands MULTI sent to the emulation module. 
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NOTE: logging commands in this way may result in a VERY large file. 
Beware of the disk space it may require. 


To reinitialize the system 


If you suspect that the emulation module is out of sync with the MULTI 
debugger, you may want to reinitialize it. Perform the steps below to 
accomplish reinitialization: 


In the Target window, type: 
init -c 


Repeat steps 5 through 8 in the "Getting started" section to 
configure the emulation module. 


To disconnect from the emulation module 
In the Debugger window, select Remote—Disconnect. 


The Debugger command pane indicates that the debugger has 
disconnected from the emulation module. 


Error conditions 
"IERROR 800! Invalid command: beast" 


usually means that there is not a target interface module (TIM) 
connected to the emulation module or the emulation module does not 
have firmware for the CPU32 family. Verify that the emulation module 
is connected to the target. Next, go to the system window of the logic 
analyzer interface and verify that the Emulation Module icon (stop- 
light) is described as a Motorola CPU16/32 BDM Emulator. If it is not, 
follow the steps on page 152 to update the firmware in the emulation 
module. 


"command socket connection failed: WSAECONNREFUSED: connection refused" 


usually means the emulation module is not at port #6470 on the Logic 
Analysis System. 


Green Hulls MULTI Software Development Environment User’s 
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Guide. 


Using MULTI with the Agilent Technologies Processor Probe from 
Green Hills Software, Inc. 


The Green Hills web site: http:/Awww.ghs.com 


“Configuring the Emulation Module” on page 154 for more information 
on configuration options and the "cf" command. 
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Using the Software Development Systems 
debugger 


Compatibility 


Version 7.2 of the SingleStep debugger from Software Development 
Systems, Inc. is one of several debuggers which connect to the Agilent 
Technologies emulation module. 


This section provides information that is specific to using SingleStep 
with the Agilent Technologies emulation module. It is intended to be 
used in conjunction with the SingleStep documentation provided by 

SDS. 


Overview 


Host computer d ; 
Logic analysis 
system with 


SingleStep ar 
module 


Startup behavior 


The following actions are performed at the start of a session and when 
you select File?Debug: 


e Ifthe target reset option is selected, the target is reset and programmed 
with the register values in the configuration file (<ftlename>.cfg). 
Hardware breakpoints are disabled. 

Software breakpoints are enabled. 

All breakpoints are cleared. 

main() _exit breakpoints are set, if that option is selected. 
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Getting started 


Check that your emulation module is programmed with firmware 
for a CPU32 processor: 


Go to the system window of the logic analyzer interface and verify that 
the Emulation Module icon is described as a "Motorola CPU16/32 BDM 
Emulator". If it is not, follow the instructions on page 152 to update 
the firmware. 


Connect to the emulation module: 


a Start SingleStep running on your PC or workstation. 


b When the small Debug dialog box appears in the middle of the 
screen, click the Connection tab and then enter the IP 
address of the Agilent Technologies logic analysis system 
which contains the emulation module. 


If the Debug dialog box is not visible, select File7?Debug. 


Note: SingleStep is hard-coded to connect to the emulation module at port 
6470 of the logic analysis system frame. See page page 188 for more 
information on port numbers. 


Configure the emulation module with the processor clock speed. 


In the Debug dialog box, click the Connection tab and then enter a 
Processor Clock speed which is less than or equal to the speed at which 
the processor will run out of reset. 


The emulation module must know the target clock speed before it can 
communicate with the target. This value depends on the oscillator or 
crystal used on your target system and the multipliers applicable at 
reset. The communications speed can be changed (see “Download 
performance” on page 209) but will be reset to this value each time 
SingleStep resets the processor. 


Initialize the target system. 


The target system must have various registers and memory locations 
initialized before it can access RAM and before SingleStep can 
download an application. Normally, code in the target’s boot ROM 
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performs this initialization. However, when SingleStep resets the 
target, it immediately places the processor in debug mode. Any 
initialization code which may exist on the target board has not been 
run. 


SingleStep provides a way for target initialization to occur without 
running application code through the use of the "_config" alias. _config 
is used to define a list of commands that will be used to initialize the 
target after a reset. The _config alias should be defined in the sstep.ini 
file Gin the "cmd" directory) and will point to a file of type .cfg which 
contains the actual initialization commands. 


SingleStep provides some workspace files for some standard targets. 
These files will setup various registers in order to initialize these 
targets. The files can be found in the 7mzt directory and are as follows: 


EST SBC 360 - est360.wsp 

Motorola 332 EVS revision a — 332evs_a.wsp 
Motorola 332 EVS revision b — 332evs_b.wsp 
Motorola 340 EVS — 340evs.wsp 

Nohau Trg-332 — trg332.wsp 

Vesta SBC332 — vesta332,wsp 


Loading one of these workspace files followed by opening the Debug 
Dialog from the File Menu and setting the File and Connection options 
then clicking OK will create a corresponding .cfg file in the cmd 
directory. This file will store the values of the items shown in the Target 
Configuration tab. You may wish to edit these values before clicking OK 
and saving them to a .cfg file. 
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Example 


If you load the est360.wsp and set up the Debug Dialog options for 
the target you are connecting to, when you click OK, the file 
68360.cfg will be created and place in the cmd directory. 
Comments have been added to this file, in order to explain the 
items (comments begin with a #). 


Contents of 68360.cf9: 
set vectbase = 0x400000 
set vectaddr = 0x400000 


write -1l CPU:0x3FF00 = 0x08000133 # MBAR 
write -1 SD:0x08001000 = 0x00014F71 # MCR 
write -b SD:0x08001022 = Ox0E # SYPCR 
write -1 SD:0x08001040 = 0x17CD23A0 # GIMR 
write -1l SD:0x08001050 = 0x00000001 # BRO 
write -1 SD:0x08001054 = Ox3FFC0002 # ORO 
write -l1 SD:0x08001060 = 0x00100001 # BR1 
write -l1 SD:0x08001064 = Ox2FF80000 # OR1 
write -1 SD:0x08001080 = 0x00400001 # BR3 
write -1 SD:0x08001084 = 0x2FE00003 # OR3 
write -b SD:0x0800100C = Ox8F # CLKOCR 
write -w SD:0x08001010 = 0x4000 # PLLCR 
write -w SD:0x08001014 = 0x8000 # CDVCR 
write -w SD:0x08001016 = 0x0000 # PEPAR 


The .cfg file sets up the target’s chip select registers (SIM registers) 
needed in order to map memory correctly. If your target is connected 
to an analysis probe, you will need to execute some additional 
commands in order to configure the analysis probe. The analysis probe 
stores its own copy of the chip select registers. In general, just 
executing the above write commands will configure the target’s 
registers. The emulation module also stores a copy of these registers. 
The emulation module command “sync sim” listed below will copy the 
values of the target’s SIM registers into the EMSIM registers. Next, the 
EMSIM registers must be copied over to the analysis probe. This is 
accomplished by issuing the built-in command “pp load”. Enter the 
following two commands into the Command window: 


control -c “sync sim” 
control -c “pp load” 


You should have the appropriate values for your target first written into 
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the SIM registers before issuing these two commands. “control —c” is 
used by SingleStep to forward a command to the emulation module. 
For help on either the “sync sim” or “pp load” command, issue the 
commands, control —c “help sync” or control —c “help pp load” into the 
Command window. Also, note that the help pp load command will refer 
to the analysis probe as a preprocessor. They are one in the same. 


If your target is not one that SDS ships a workspace for, add a line to 
the bottom of the file “sstep.ini” (which is supplied with the debugger) 
that sets up the _config alias to point to a .cfg file to use. This line will 
look like: 


alias _config ‘source ${cmdpath}68336.cfg’ 


In this case, the name of the config file to use is 68336.cfg. Edit this file 
specific for your targets need. Keep in mind, that commands beginning 
with “control -c” followed by a string of quoted text are commands that 
will be forwarded to the emulation module. Commands that do not 
begin with “control —c” are SingleStep commands. 


Example 
Here is a configuration file which contains both emulation module 


built-in commands and SingleStep commands: 


# Config file for 68336 Motorola Modular Board 
# First set clock speed to 8 MHz 
COmMerol, =C Weie jormocelest}" 


# Set the processor id to 68336 
ComMewol, =C WEHE PHROCSCHSSG™ 


set vectbase = 0x000000 
set vectaddr = 0x000000 


# write -1 CPU:0x3FFO0O = 0x01000133 # MBAR 
# write -1 SD:0x01001000 0x0001438F # MCR 

# write -b SD:0x01001022 = Ox0E # SYPCR 
# write -1 SD:0x01001040 0x17CD23A0 # GIMR 
# write -1 SD:0x01001050 0x00000000 # BRO 

# write -1 SD:0x01001054 0x00000000 # ORO 

# write -1 SD:0x01001060 OxA0000001 # BR1 

# write -1 SD:0x01001064 Ox2FE00000 # OR1 

# write -1 SD:0x01001080 0x00000001 # BR3 

# write -1 SD:0x01001084 = 0x4FE00009 # OR3 
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# write -b SD:0x0100100C = 0x8C # CLKOCR 
# write -w SD:0x01001010 = 0x8000 # PLLCR 
# write -w SD:0x01001014 = 0x0000 # CDVCR 
# write -w SD:0x01001016 = Ox00A0 # PEPAR 
# write -w SD:0x01001026 = 0Ox070F # PICR 

# write -b SD:0x01001008 = 0x84 # AVR 


# Reset, run, break in order to set up chip selects 

# We can issue these commands since the target has boot 
# code in ROM that sets up the chip select registers 
Comemol =¢ Wiese 

CGomEwol, =¢€ Mew 

Comewoll +E! Mo! 


# Issue the next two commands since there is an 
# analysis probe connected to the target 


# Copy the sim values to the emsim set 

Ccimicwol = Msyyrare sali? 

# Copy the emsim values to the analysis probe 

control -c "pp load" 

The config file shown in this example did not need to set up chip 
select registers because the target has boot code in ROM that will 
accomplish this. Therefore, just issuing a “reset, run, break” will 
execute the boot code in ROM. If your ROM does not contain boot 
code to set up these registers, add write commands to the .cfg file 
(similar to what is shown here for the 68360) to set up these values. 
Reset, run, break would not be used to set up a target that does not 
contain boot code. 


Given that you added a line to the sstep.ini file that points to this 
configuration file, all you need to do now is to bring up the Debug 
Dialog and enter the file to download (if desired), and the connection 
port to use. Click OK when finished. This config file (the one pointed to 
by the added line in sstep.ini) will get executed if and only if you have 
not unchecked the “Reset Target” option on the Debug Dialog’s 
“Options” tab. This is selected by default. Deselecting this option will 
prevent the config file you specified in the sstep.ini file from being 
executed. Also, keep in mind that this file will be executed every time 
the Debug Dialog is terminated via the OK button when “Reset Target” 
is selected. 


206 Solutions for CPU32 


Chapter 8: Using the Emulator with a Debugger 
Using the Software Development Systems debugger 


In summary, there are two ways for you to configure the emulation 
module and your target. The first method consisted of loading an 
existing workspace, using the Debug Dialog to modify any items 
needed followed by clicking the OK button and having it create a 
corresponding .cfg file. If you have an analysis probe connected to this 
target, you need to enter the two additional commands into the 
Command window (control —c “sync sim”, control —c “pp load”). The 
second method consisted of creating a .cfg file and specifying that file 
in the _config alias in the sstep.ini file. This file will automatically be 
loaded upon clicking OK in the Debug Dialog. 


To save time, you may want to do the first method just to generate .cfg 
file that you can edit and use in method two. If you had an analysis 
probe connected you would add the two commands mentioned 
previously to the .cfg file thereby not having to enter them through the 
Command window. 


The "Debug" dialog method and the sstep.ini method are mutually 
exclusive. Use one or the other, but not both. 


Initialization of the target (that is, execution of the _config alias) will 
not actually occur until the "Debug" dialog is successfully exited. 


Set up the download and execution options in the Options tab of 
the Debug dialog. 


Download the application and run: 


Select the File tab and enter the application file name. Exit the 
"Debug" dialog box by clicking OK. 


Emulation module initialization and target initialization occur every 
time the "Debug" dialog is terminated via the OK button. A summary of 
the actions taken by SingleStep is given here: 


e Initialize the emulation module with the communication speed specified in 
the "Debug" dialog. 


e If"reset target" was selected then execute the commands specified by the 
_reset alias. The _reset alias should be used to specify commands that are 
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specific to initializing the processor. It is executed each time the processor 
is reset. The value of the _reset alias can be viewed by issuing a "alias 
_reset" from the command window. 


e Execute the commands specified by the _config alias. The _config alias 
should be used to specify commands that are specific to initializing 
(configuring) the target system. It is executed each time the processor is 
reset and each time the debug dialog is exited. The value of the _config 
alias can be viewed by issuing an "alias _config" from the command 
window. 


e If"load image" was selected then download the application and set the PC 
based on object module file contents. 


e If "execute until main" was selected then set a breakpoint at main() and 
run. 


To send commands to the emulation module 


To view commands sent by SingleStep 


SingleStep communicates to the emulation module using the emulation 
module’s "terminal interface" commands. SingleStep automatically 
generates and sends the commands required for normal operation. 
This communication between SingleStep and the emulation module 
can be observed by entering the following command in the SingleStep 
command window: 


control -ms 


To send commands 


"Terminal interface" commands may be sent directly to the emulation 
module from the SingleStep command window or included in 
SingleStep’s .cfg or .dbg command files. 


Commands should be enclosed in double quotes and given the prefix: 


208 Solutions for CPU32 


Chapter 8: Using the Emulator with a Debugger 
Using the Software Development Systems debugger 


control-c. 


Examples 


To see the speed that the emulation module is using to 
communicate with the target system you would issue the following 
command in the SingleStep command window: 


Comemol, =e "ehe foroqecie” 


To change the speed to match a 25MHz processor clock you would 
issue the following command in the command window: 


ComierOl =C¢ Neue jorocelhk=a25" 


For more information about "terminal interface" commands see page 
156. 


Download performance 


Downloads are fastest when the emulation module speed is set to 
match that of the target processor. The initial speed that the emulation 
module uses to communicate with the target processor is set by the 
Processor clock item in the connection tab of the "Debug" dialog. The 
user is responsible for specifying this speed to be less than or equal to 
the initial, reset, speed of the processor. Usually a command in the 
_config alias will raise the speed of the processor above its initial, reset 
value. For maximum download performance the command to increase 
the target processor speed should be followed by a command to 
increase the speed of the emulation module communication: 


Example 


After setting the clock rate of the target processor, the following 
command should be entered to increase the emulation module 
communication speed: 


Comicwol =-@ "Cie jorocchk=a25" 
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Error conditions 


"ERROR 800! Invalid command: beast" usually means that there is not 
a target interface module (TIM) connected to the emulation module or 
the emulation module does not have firmware for the CPU32 family. 
Verify that the emulation module is connected to the target. Next, go 
to the system window of the logic analyzer interface and verify that the 
Emulation Module icon (stop-light) is described as a Motorola CPU16/ 
32 BDM Emulator. If it is not, follow the steps on page 152 to update 
the firmware in the emulation module. 


"command socket connection failed: WSAECONNREFUSED: 


connection refused" usually means the emulation module is not at port 
#6470 on the Logic Analysis System. See step 2 of the getting started 
section above. 


"unrecognized hostname" 


usually means that the debugger is unable to establish communication 
with the emulator. Verify communication to the emulation module by 
doing a ping to the logic analyzer. If you are unable to ping the logic 
analyzer refer to page 283 for more information. 


The SDS web site: http://www.sdsi.com 
The SDS SingleStep Users Guide. 


The configuration section beginning on page 154 for more information 
on configuration options and the "cf" command. 
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Using the Analysis Probe and Emulation Module 
Together 
This chapter describes how to use an analysis probe, an emulation 


module, and other features of your Agilent Technologies 16600A or 
16700A logic analysis system to gain insight into your target system. 


What are some of the tools I can use? 


You can use a combination of all of the following tools to control and 
measure the behavior of your target system: 


e Your analysis probe, to acquire data from the processor bus while it is 
running full-speed. 


e Your emulation module, to control the execution of your target processor 
and to examine the state of the processor and of the target system. 


e The Emulation Control Interface, to control and configure the emulation 
module, and to display or change target registers and memory. 


e Display tools including the Listing tool, Chart tool, and System 
Performance Analyzer tool to make sense of the data collected using the 
analysis probe. 


e Your debugger, to control your target system using the emulation module. 
Do not use the debugger at the same time as the Emulation Control 
Interface. 


e The B4620B Source Correlation Tool Set, to relate the analysis trace to 
your high-level source code. 


Which assembly-level listing should I use? 


Several windows display assembly language instructions. Be careful to 
use to the correct window for your purposes: 


e The Listing tool shows processor states that were captured during a “Run” 
of the logic analyzer. Those states are disassembled and displayed in the 
Listing window. 


e The Emulation Control Interface shows the disassembled contents of a 
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section of memory in the Memory Disassembly window. 


e Your debugger shows your program as it was actually assembled, and Cif it 
supports the emulation module) shows which line of assembly code 
corresponds to the value of the program counter on your target system. 


Which source-level listing should I use? 
Different tools display source code for different uses: 


e The Source Viewer window allows you to follow how the processor 
executed code as the analyzer captured a trace. Use the Source Viewer to 
set analyzer triggers. The Source Viewer window is available only if you 
have licensed the B4620B Source Correlation Tool Set. 


e Your debugger shows which line of code corresponds to the current value 
of the program counter on your target system. Use your debugger to set 
breakpoints. 


Where can I find practical examples of 
measurements? 


The Measurement Examples section in the online help contains 
examples of measurements which will save you time throughout the 
phases of system development: hardware turn-on, firmware 
development, software development, and system integration. 


A few of the many things you can learn from the measurement 
examples are: 


e How to find glitches. 
e How to find NULL pointer de-references. 
e How to profile system performance. 


To find the measurement examples, click on the Help icon in the logic 
analysis system window, then click on “Measurement Examples.” 
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Triggering the Emulation Module from the 
Analyzer 


You can trigger the emulation module from the logic analyzer using 
either the Source Viewer window or the Intermodule window. If you are 
using the Agilent Technologies B4620B Source Correlation Tool Set, 
using the Source Viewer window is the easiest method. 


To stop the processor when the logic analyzer 
triggers on a line of source code (Source 
Viewer window) 


If you have the Agilent Technologies B4620B Source Correlation Tool 
Set, you can easily stop the processor when a particular line of code is 
reached. 


1 In the Source window, click on the line of source code where you 
want to set the trigger, then select Trace about this line. 


The logic analyzer trigger is now set. 


Source Viewer<1 > [- [51] 
File Options Trace Help 


Step Source | Goto In Listing ] Browse Source ] Text Seatiet 


>To Captured Source Line 


Previous | Next 


Displayed File: /hplogic/demo/swa/UPDT_ECS.C 
7* Ramp the temperature and humidity targets up and d 


if (temp_dir == up) 
f line # 81 


(*tempe 
if (*te Trace before this line 

temP_ Trace about this line 
else Trace after this line 


(*tempe Goto this line in listing before current state 


pecs Goto this line in listing after current state 


2 Select Trace~Enable - Break Emulator On Trigger. 
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The emulation module is now set to halt the processor after receiving a 
trigger from the logic analyzer. 


To disable the processor stop on trigger, select Trace—Disable - 
Break Emulator On Trigger. 


Click Group Run in the Source window (or other logic analyzer 
window). 


If your target system is not already running, click Run in the 
emulation Run Control window to start your target. 


To stop the processor when the logic analyzer 
triggers (ntermodule window) 


Use the Intermodule window if you do not have the Agilent 
Technologies B4620B Source Correlation Tool Set or if you need to use 
amore sophisticated trigger than is possible in the Source Viewer 
window. 


Create a logic analyzer trigger. 


In the Intermodule window, click the emulation module icon, 
then select the analyzer which is intended to trigger it. 
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The emulation module is now set to stop the processor when the logic 
analyzer triggers. 


Click Group Run in the Source window (or other logic analyzer 
window). 


If your target system is not already running, click Run in the 
emulation Run Control window to start your target. 


See the online help for your logic analysis system for more information 
on setting triggers. 


To minimize the “skid” effect 


There is a finite amount of time between when the logic analyzer 
triggers, and when the processor actually stops. During this time, the 
processor will continue to execute instructions. This latency is referred 
to as the skid effect. 


To minimize the skid effect: 


In the Emulation Control Interface, open the Configuration 
window. 


Set processor clock speed to the maximum value which your 
target can support. 


The amount of skid will depend on the processor’s execution speed and 
whether code is executing from the cache. See page 159 for 
information on how to configure the clock speed. 


To stop the analyzer and view a measurement 


To view an analysis measurement you may have to click Stop 
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after the trigger occurs. 


When the target processor stops it may cause the analyzer qualified 


clock to stop. Therefore most intermodule measurements will have to 
be stopped to see the measurement. 


Il, 
2. 


Example 


An intermodule measurement has been set up where the analyzer 
is triggering the emulation module. The following sequence could 
occur: 


The analyzer triggers. 
The trigger (“Break In”) is sent to the emulation module. 


The emulation module stops the user program which is running on 
the target processor. The processor enters a background debug 
monitor. 


Because the processor has stopped, the analyzer stops receiving a 
qualified clock signal. 


If the trigger position is “End”, the measurement will be completed. 


If the trigger position is not “End”, the analyzer may continue waiting 
for more states. 


The user clicks Stop in a logic analyzer window, which tells the logic 
analyzer to stop waiting, and to display the trace. 
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Tracing until the processor halts 


If you are using a state analyzer, you can begin a trace, run the 
processor, then manually end the trace when the processor has halted. 


To halt the processor, you can set a breakpoint using the Emulation 
Control Interface or a debugger. 


Some possible uses for this measurement are: 


e To store and display processor bus activity leading up to a system crash. 

e To capture processor activity before a breakpoint. 

e To determine why a function is being called. To do this, you could set a 
breakpoint at the start of the function then use this measurement to see 
how the function is getting called. 


This kind of measurement is easier than setting up an intermodule 
measurement trigger. 


To capture a trace before the processor halts 


Set the logic analyzer to trigger on nostate. 

Set the trigger point (position) to End. 

In a logic analyzer window, click Run. 

In the Emulation Control Interface or debugger click Run. 


When the emulation module halts click Stop in the logic analyzer 
window to complete the measurement. 


This is the recommended method to do state analysis of the processor 
bus when the processor halts. 


If you need to capture the interaction of another bus when the 
processor halts or you need to make a timing or oscilloscope 
measurement you will need to trigger the logic analyzer from the 
emulation module (described in the next section). 
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Triggering the Logic Analyzer from the 
Emulation Module 


You can create an intermodule measurement which will allow the 
emulation module to trigger another module such as a timing analyzer 
or oscilloscope. 


If you are only using a state analyzer to capture the processor bus then 
it will be much simpler to use “Tracing until processor halts” as 
described on page 218. 


Before you trigger a logic analyzer (or another module) from the 
emulation module, you should understand a few things about the 
emulation module trigger: 


The emulation module trigger signal 


The trigger signal coming from the emulation module is an “In 
Background Debug Monitor” (“In Monitor”) signal. This may cause 
confusion because a variety of conditions could cause this signal and 
falsely trigger your analyzer. 


The “In Monitor” trigger signal can be caused by: 


¢ The most common method to generate the signal is to click Run and then 
click Break in the Emulation Control Interface. Going from “Run” 
(Running User Program) to “Break” (“In Monitor”) generates the trigger 
signal. 


e Another method to generate the “In Monitor” signal is to click Reset and 
then click Break. Going from the reset state of the processor to the “In 
Monitor” state will generate the signal. 


e In addition, an “In Monitor” signal is generated any time a debugger or 
other user interface reads a register, reads memory, sets breakpoints or 
steps. Care must be taken to not falsely trigger the logic analyzers listening 
to the “In Monitor” signal. 
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Group Run 


The intermodule bus signals can still be active even without a 
Group Run. 


The following setups can operate independently of Group Run: 
e Port In connected to an emulation module 

e Emulation modules connected in series 

e Emulation module connected to Port Out 

Here are some examples: 


e If “Group Run” is armed from “Port In” and an emulation module is 
connected to Group Run, then any “Port In” signal will cause the emulation 
module to go into monitor. The Group Run button does not have to be 
pressed for this to operate. 


e Iftwo emulation modules are connected together so that one triggers 
another, then the first one going into monitor will cause the second one to 
go into monitor. 


e Ifan emulation module is connected to Port Out, then the state of the 
emulation module will be sent out the Port Out without regard to “Group 


” 


Run”. 


The current emulation module state (Running or In Monitor) should be 
monitored closely when they are part of a Group Run measurement so 
that valid measurements are obtained. 


Group Run into an emulation module does not mean that 
the Group Run will Run the emulation module. 


The emulation module Run, Break, Step, and Reset are independent of 
the Group Run of the Analyzers. 
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For example, suppose you have the following IMB measurement set up: 


Group Run Arming Tree 


Group Run = 


Clicking the Group Run button (at the very top of the Intermodule 
window or a logic analyzer window) will start the analyzer running. The 
analyzer will then wait for an arm signal. Now when the emulation 
module transitions into “Monitor” from “Running” (or from “Reset”), it 
will send the arm signal to the analyzer. If the emulation module is “In 
Monitor” when you click Group Run, you will then have to go to the 
emulation module or your debugger interface and manually start it 
running. 


Debuggers can cause triggers 


Emulation module user interfaces may introduce additional states into 
your analysis measurement and in some cases falsely trigger your 
analysis measurement. 


When a debugger causes your target to break into monitor it will 
typically read memory around the program stack and around the 
current program counter. This will generate additional states which 
appear in the listing. 


You can often distinguish these additional states because the time tags 
will be in the ms and ms range. You can use the time tag information to 
determine when the processor went into monitor. Typically the time 
between states will be in the nanoseconds while the processor is 
running and will be in the ms and ms range when the debugger has 
halted the processor and is reading memory. 


Not also that some debugger commands may cause the processor to 
break temporarily to read registers and memory. These states that the 
debugger introduces will also show up in you trace listing. 
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If you define a trigger on some state and the debugger happens to read 
the same state, then you may falsely trigger your analyzer 
measurement. In summary, when you are making an analysis 
measurement be aware that the debugger could be impacting your 
measurement. 


To trigger the analyzer when the processor 
halts 


Remember: if you are only using a state analyzer to capture the 
processor bus then it will be much simpler to use “Tracing until 
processor halts” as described on page 218. 


Set the logic analyzer to trigger on anystate. 
Set the trigger point to center or end. 


In the Intermodule window, click on the logic analyzer you want 
to trigger and select the emulation module. 


The logic analyzer is now set to trigger on a processor halt. 
Click Group Run to start the analyzer(s). 


Click Run in the Emulation Control Interface or use your 
debugger to start the target processor running. 


Clicking Group Run will not start the emulation module. The 
emulation module run, break, step, and reset are independent of the 
Group Run of the analyzers. 


Wait for the Run Control window in the Emulation Control 
Interface or the status display in your debugger to show that the 
processor has stopped. 


The logic analyzer will store states up until the processor stops, but 
may continue running. 


You may or may not see a “slow clock” error message. In fact, if you are 
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using a state analyzer on the processor bus the status may never 
change upon receiving the emulation module trigger (analysis arm). 
This occurs because the qualified processor clock needed to switch the 
state analyzer to the next state is stopped. For example, the state 
analyzer before the arm event may have a status of “Occurrences 
Remaining in Level 1: 1” and after the arm event it may have the same 
status of “Occurrences Remaining in Level 1: 1”. 


If necessary, in the logic analyzer window, click Stop to complete 
the measurement. 


If you are using a timing analyzer or oscilloscope the measurement 
should complete automatically when the processor halts. If you are 
using a state logic analyzer, click Stop if needed to complete the 
measurement. 


To trigger the analyzer when the processor 
reaches a breakpoint 


This measurement is exactly like the previous one, but with the one 
additional complexity of setting breakpoints. Be aware that setting 
breakpoints may cause a false trigger and that the breakpoints set may 
not be valid after a reset. 


Remember: if you are only using a state analyzer to capture the 
processor bus then it will be much simpler to use “Tracing until 
processor halts” as described on page 218. 


Set the logic analyzer to trigger on anystate. 
Set the trigger point to center or end. 


In the Intermodule window, click on the logic analyzer you want 
to trigger and select the emulation module. 


The logic analyzer is now set to trigger on a processor halt. 


Set the breakpoint. 
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If you are going to run the emulation module from Reset you must do a 
Reset followed by Break to properly set the breakpoints. The Reset 
will clear all on-chip hardware breakpoint registers. The Break 
command will then reinitialize the breakpoint registers. If you are using 
software breakpoints which insert an illegal instruction into your 
program at the breakpoint location you will not need to do the Reset, 
Break sequence. Instead you must take care to properly insert your 
software breakpoint in your RAM program location. 


Click Group Run to start the analyzer(s). 


Click Run in the Emulation Control Interface or use your 
debugger to start the target processor running. 


Clicking Group Run will not start the emulation module. The 
emulation module run, break, step, reset are independent of the Group 
Run of the analyzers. 


Wait for the Run Control window in the Emulation Control 
Interface or the status display in your debugger to show that the 
processor has stopped. 


The logic analyzer will store states up until the processor stops, but 
may continue running. 


You may or may not see a “slow clock” error message. In fact, if you are 
using a state analyzer on the processor bus the status may never 
change upon receiving the emulation module trigger (analysis arm). 
This occurs because the qualified processor clock needed to switch the 
state analyzer to the next state is stopped. For example, the state 
analyzer before the arm event may have a status of “Occurrences 
Remaining in Level 1: 1” and after the arm event it may have the same 
status of “Occurrences Remaining in Level 1: 1” 


If necessary, in the logic analyzer window, click Stop to complete 
the measurement. 


If you are using a timing analyzer or oscilloscope the measurement 
should complete automatically when the processor halts. If you are 
using a state logic analyzer, click Stop if needed to complete the 
measurement. 
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Hardware Reference 


This chapter contains additional reference information including the 
specifications and characteristics for the analysis probe and the 
emulation probe, as well as signal mapping for the Agilent Technologies 
E2480A analysis probe. It consists of the following information: 


e Analysis probe reference 


e Emulation module reference 
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Analysis probe—operating characteristics 


The following operating characteristics are not specifications, but are 
typical operating characteristics for the Agilent Technologies E2480A 
CPU82 analysis probe. 


Operating Characteristics 


Microcontroller 
Supported 


Package 
Supported 


Probes 
Required 


Logic Analyzers 
Supported 


Accessories 
Required 


Optional 
Accessories 


Motorola 68331, 68332, 68334, 68335, 68336, or 68376 


132-pin POFP, 144-pin TOFP, 160-pin POFP 


Mandatory 4 for state. Up to 8 for timing. 


Agilent Technologies 16600A, 16601A, 16602A, 16603A, 16550A (one 
or two cards), 16554A/55A/56A (one or two cards), 16555D/56D/57D 
(one or two cards), 1660A/AS/C/CS/CP, 1661A/AS/C/CS/CP, 1662A/ 
AS/C/CS/CP, 1670A/D, 1671A/D, 1672A/D 


See chapter 1 for available accessories. A probe adapter and a 
transition board are required. For address reconstruction, the 
emulation module is required. 


An emulation module can be connected to the analysis probe. 


Electrical Characteristics 


Power 
Requirements 


Signal Line 
Loading 


650 mA typical @ 5V, supplied by the logic analyzer. 
CAT | Pollution degree 2. 


10 pF maximum on all signals. 


Environmental Characteristics (Operating) 


Temperature 
Altitude 


Humidity 


0 to + 50 degrees C 
4,600 m 


Up to 75% noncondensing. Avoid sudden, extreme temperature 
changes which could cause condensation on the circuit board. 
For indoor use only. 
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Theory of operation and clocking 


Timing 
For timing measurements, raw digital signals from the microcontroller 


are presented to the logic analyzer through the timing connectors. The 
acquisition clock is provided by the logic analyzer. 


State 


For state measurements, all signals are processed by active logic for 
time alignment before they are routed to the state connectors. This 
allows the logic analyzer to capture all information about a given cycle 
in one acquisition state. 


Some of the signals which assist the analysis probe in triggering and 
aligning the source code are reconstructed from their reconfigured 
functions as chip selects or general I/O. The analysis probe must be 
configured to match the target system for this reconstruction function 
to work (page 89). 


A qualified target system clock is used by the logic analyzer to acquire 
state cycles. 


Address reconstruction overview 


When CPU82 microcontrollers are reconfigured, they can present 
special problems for debugging. This is especially true when address 
bits A[19:23] are reconfigured as chip selects. The Agilent Technologies 
E2480A analysis probe overcomes these problems by using information 
in the base address register associated with such chip selects to 
replace the missing address bits. The value injected into the signal path 
depends on which chip select is active. 


This reconstruction provides many benefits when analyzing a target 
system: 
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e Triggering on address AO through A23 is possible, even when the upper 
address bits are not available from the target microcontroller. 


e The software analyzer, with its increased analysis capabilities, can be used. 


e Code captured in a trace can be correlated with mnemonics in the source 
database. 


e Alignment of activity shown in a trace list. 


The Agilent Technologies E2480A also reconstructs function control 
bits FC[0:2] when they are configured as chip selects, and SIZ[0:1] and 
DSAck[0:1] when they are configured as general I/O. 


The programming is non-volatile. Once programmed, the Agilent 
Technologies E2480A does not need to remain connected to the 
emulation module to maintain address reconstruction. 


The figure on the following page shows the process by which the 
Agilent Technologies E2480A reconstructs addresses. 


State and Timing modes use different connectors on the analysis 
probe. The Timing pins are direct connections to the 
microcontroller signals. The State pins have active circuitry on the 
analysis probe. State information is acquired three target system 
clock cycles after the same information is captured in Timing mode. 


“Configuring the analysis probe for address reconstruction” on page 89. 
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Analysis probe signal-to-connector mapping 
(Timing) 


The following table shows the flow of signals from the microcontroller 
through the E2480A timing connectors to the logic analyzer. In 
addition to being grouped along microcontroller-like functions, the 
signals are also grouped and ordered along their microcontroller port 
definitions. 


pee a aie ANALYZER TIMING 
SE CONNECTOR BIT TIMING LABEL cUBLABEL 
NAME 

PIN 
Timing Connector J5, Timing Pod 1 
DATAO 38 0 DATA PORTH 
DATAI 36 1 DATA PORTH 
DATA2 34 2 DATA PORTH 
DATA3 32 3 DATA PORTH 
DATA 30 4 DATA PORTH 
DATAS 28 5 DATA PORTH 
DATAG 26 6 DATA PORTH 
DATAT 24 7 DATA PORTH 
DATAS 22 8 DATA PORT G 
DATA 20 9 DATA PORT G 
DATA10 18 10 DATA PORT G 
DATAII 16 1 DATA PORT G 
DATAI2 4 12 DATA PORT G 
DATA13 12 13 DATA PORT G 
DATAI4 10 4 DATA PORT G 
DATAI5 8 15 DATA PORT G 
ClkOut 6 CLK 
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CPU32 SIGNAL 


NAME 


E2480A 
TIMING 
CONNECTOR BIT 
PIN 


Timing Connector J5, Timing Pod 2 


~BR/CSO 
~BG/CS1 
~BGAck/CS2 
DSAck0 


DSAck1 
~AVec 
~RMC 
~DS 


~AS 
SIZ0 
$121 
R/~W 


~BERR 

~HALT 
~Targ_Reset 
~Freeze/Quote 


~CSBoot 


37 
35 
33 
31 


29 
27 
25 
23 


21 
19 
17 
15 


0 


CLK 


ANALYZER TIMING 
LABEL 


STAT 
STAT 
STAT 
STAT 


STAT 
STAT 
STAT 
STAT 


STAT 
STAT 
STAT 
STAT 


STAT 
STAT 
STAT 


TIMING 
SUBLABEL 


CSx 

CSx 

CSx 
PORTE 


PORTE 
PORTE 
PORTE 
PORTE 


PORTE 
PORTE 
PORTE 
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E2480A 
CPU32 SIGNAL TIMING ANALYZER TIMING TIMING 
NAME CONNECTOR BIT LABEL SUBLABEL 
PIN 
Timing Connector J4, Timing Pod 3 
ADDRO 38 0 ADDR 
ADDRI1 36 1 ADDR 
ADDR2 34 2 ADDR 
ADDR3 32 3 ADDR PORT B 
ADDR4 30 4 ADDR PORT B 
ADDR5 28 5 ADDR PORT B 
ADDR6 26 6 ADDR PORT B 
ADDR7 24 7 ADDR PORT B 
ADDR8 22 8 ADDR PORT B 
ADDR9 20 9 ADDR PORT B 
ADDR10 18 10 ADDR PORT B 
ADDR11 16 11 ADDR PORTA 
ADDR12 14 12 ADDR PORTA 
ADDR13 12 13 ADDR PORTA 
ADDR14 10 14 ADDR PORTA 
ADDR15 8 15 ADDR PORTA 
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E2480A 
CPU32 SIGNAL TIMING ANALYZER TIMING TIMING 
NAME CONNECTOR BIT LABEL SUBLABEL 

PIN 
Timing Connector J4, Timing Pod 4 
ADDR16 37 0 ADDR PORTA 
ADDR17 35 1 ADDR PORTA 
ADDR18 33 2 ADDR PORTA 
FC0/CS3 31 3 PORT C, CSx 
FC1/CS4 29 4 PORT C, CSx 
FC2/CS5 27 5 PORT C, CSx 
ADDR19/~CS6 25 6 ADDR PORT C, CSx 
ADDR20/~CS7 23 7 ADDR PORT C, CSx 
ADDR21/~CS8 21 8 ADDR PORT C, CSx 
ADDR22/~CS9 19 9 ADDR PORT C, CSx 
ADDR23/~CS10 —-17 10 ADDR PORT C, CSx 
na 15 11 
na 13 12 
na 11 13 
~IFetch/DS1 9 14 
~IPipe/DSO 7 15 
~Bkpt/DSclk 5 CLK 


NOTE: Signals A19—A23 and CS6—CS10 are multiplexed onto the 
same pins, and the default configuration of the logic analyzer 
assumes that signals Al19—A23 are valid. If any of the chip selects, 
CS6—CS 10, are being used then the bits associated with A19—A23 
should be removed from the ADDR label via the format menu in the 
logic analyzer. This corresponds to bits 3—7 of pod A4. This results 
in the display of correct address information in the ADDR field of 
the listing menu and presents only valid address bus bits to the 
ADDR field in the trigger menu. 
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E2480A 
CPU32 SIGNAL TIMING ANALYZER TIMING 
NAME CONNECTOR BIT LABEL 
PIN 
Timing Connector J2, Timing Pod 5 
336, 376 
MISO 38 0 PORT 0 
MOSI 36 1 PORT 0 
SCK 34 2 PORT 0 
PCS0/SS 32 3 PORT 0 
PCS1 30 4 PORT 0 
PCS2 28 5 PORT 0 
PCS3 26 6 PORT 0 
TxD 24 7 PORT 0 
RxD 22 8 
CTM2C 20 9 
CTD3 18 10 
CTD4 16 1 
CPWM5 14 12 
CPWM6 12 13 
CPWM7 10 14 
CPWM8 8 15 
SCK 6 CLK 
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E2480A 

TIMING ANALYZER TIMING 
PULTE EAE CONNECTOR BIT LABEL 

PIN 
Timing Connector J2, Timing Pod 6 
376, 336, 331 
335, 334, 
332 
TPO nc 37 0 TPU 
TP1 IC1 35 1 TPU 
TP2 1C2 33 2 TPU 
TP3 IC3 31 3 TPU 
TP4 0C1 29 4 TPU 
TP5 0C1/0C2 27 5 TPU 
TP6 0C1/0C3 25 6 TPU 
TP7 nc 23 7 TPU 
TP8 0C1/0C4 21 8 TPU 
TP9 0C1/0C5/IC4 19 9 TPU 
TP10 PAI 17 10 TPU 
TP11 nc 15 11 TPU 
TP12 nc 13 12 TPU 
TP13 nc 11 13 TPU 
TP14 PWMA 9 14 TPU 
TP15 PWMB 7 15 TPU 
T2clk PCIk 5 CLK 
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E2480A 

TIMING ANALYZER TIMING 
CE SIGN EE DME CONNECTOR BIT LABEL 

PIN 


Timing Connector J3, Timing Pod 7 
336, 376 335, 334, 


332, 331 
ModClk ModClk 38 0 PORT F 
IRQ1 IRQO1 36 1 PORT F 
IRO2 IRO2 34 2 PORT F 
IRO3 IRO3 32 3 PORT F 
IRO4 IRO4 30 4 PORT F 
IRO5 IRO5 28 5 PORT F 
IRO6 IRO6 26 6 PORT F 
IRO7 IRO7 24 7 PORT F 
CDT10 nc 22 8 
CTD9/CTM2L nc 20 9 
nc nc 18 10 
nc nc 16 11 
nc nc 14 12 
nc nc 12 13 
nc nc 10 14 
nc nc 8 15 
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CPU32 SIGNAL NAME 


E2480A 
TIMING 


PIN 


Timing Connector J3, Timing Pod 8 


336, 376 


A2D_A0 
A2D_A1 
A2D_A2 
A2D_A3 


A2D_A4 
A2D_A5 
A2D_A6 
A2D_A7 


A2D_B0 
A2D_B1 
A2D_B2 
A2D_B3 


A2D_B4 
A2D_B5 
A2D_B6 
A2D_B7 


nc 


334 


nc 
nc 
nc 
nc 


nc 
nc 
nc 

VDDA 


VSSA 
A2D_A0 
A2D_A1 
A2D_A2 


A2D_A3 
A2D_A4 
A2D_A5 
A2D_A6 


nc 


335, 332, 


331 
nc 
nc 
nc 
nc 


nc 
nc 
nc 

MISO 


MOS! 
SCK 
PCSO0/SS 
PCS1 


PCS2 
PCS3 
TxD 
RxD 


nc 


ANALYZER TIMING 
CONNECTOR BIT 


LABEL 
0 
1 
2 
3 
4 
5 
6 
7 PORT Q* 
8 PORT Q* 
9 PORT Q* 
10 PORT Q* 
PORT Q* 
12 PORT Q* 
13 PORT Q* 
14 PORT Q* 
15 
CLK 


*The PORT Q labels are valid only for the 331, 332, and 335 


microprocessors. 
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State connector signal definition 


The following table defines the state connectors, the logic analyzer bit 
assignments, and the label/sublabel(s) to which a signal belongs. This 


table aids in reconfiguring the logic analyzer to match a particular 
microcontroller configuration. 


E2480A State Connector Signal List 


NAME 


E2480A 
CPU32 SIGNAL STATE 
CONNECTOR BIT 
PIN 


State Connector J1, State Pod 1 


DATAO 
DATA1 
DATA2 
DATA3 


DATA4 
DATA5 
DATA6 
DATA7 


DATA8 
DATAS 
DATA10 
DATA11 


DATA12 
DATA13 
DATA14 
DATA15 


ClkOut 


38 
36 


CLK 


ANALYZER STATE 
LABEL 


DATA 
DATA 
DATA 
DATA 


DATA 
DATA 
DATA 
DATA 


DATA 
DATA 
DATA 
DATA 


DATA 
DATA 
DATA 
DATA 
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E2480A 
CPU32 SIGNAL STATE ANALYZER STATE STATE 
NAME CONNECTOR BIT LABEL SUBLABEL 
PIN 
State Connector J1, State Pod 2 
~SHOW_CYCLE 37 0 STAT ~ShoCy 
R/~W 35 1 STAT R/~W 
~INST_FETCH 33 2 STAT ~|Ftch 
~PIPE_FLUSH 31 3 STAT ~PFlsh 
SIZ0 29 4 STAT SIZx 
S1Z1 27 5 STAT SIZx 
DSAckO 25 6 STAT DSACKx 
DSAck1 23 7 STAT DSACKx 
~BERR 21 8 STAT ~BErr 
~Freeze 19 9 STAT ~Freez 
~Bkpt 17 10 STAT ~Bkpt 
~BGAck 15 11 STAT ~BGAck 
FCO 13 12 STAT FCx 
FC1 11 13 STAT FCx 
FC2 9 14 STAT FCx 
na 7 15 
~Analyzer_clk_en 5 CLK 
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E2480A 

“A ae STATE ANALYZER STATE STATE 
CONNECTOR BIT LABEL SUBLABEL 

NAME 
PIN 

State Connector J6, State Pod 3 

ADDRO 38 0 ADDR 

ADDRI 36 1 ADDR 

ADDR2 34 2 ADDR 

ADDR3 32 3 ADDR 

ADDR4 30 4 ADDR 

ADDR5 28 5 ADDR 

ADDR6 26 6 ADDR 

ADDR? 24 7 ADDR 

ADDR8 22 8 ADDR 

ADDR 20 9 ADDR 

ADDR10 18 10 ADDR 

ADDRI1 16 " ADDR 

ADDRI2 4 12 ADDR 

ADDR13 12 13 ADDR 

ADDR14 10 4 ADDR 

ADDR15 8 15 ADDR 

~Freeze 6 CLK 
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CPU32 SIGNAL 


NAME 


ADDR16 
ADDR17 
ADDR18 
ADDR19 


ADDR20 
ADDR21 
ADDR22 
ADDR23 


~BGAck 


E2480A STATE 
CONNECTOR 
PIN 


State Connector J6, State Pod 4 


37 
35 
33 
31 


29 
27 
25 
23 


5 


ANALYZER 


won — © 


Noo 


CLK 


STATE STATE 
LABEL SUBLABEL 


ADDR 
ADDR 
ADDR 
ADDR 


ADDR 
ADDR 
ADDR 
ADDR 
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Emulation module—operating characteristics 


The following operating characteristics are not specifications, but are 
typical operating characteristics for the Agilent Technologies 16610A 
emulation module and CPU382 target interface module. 


Operating Characteristics 


Motorola 68330, 68331, 68332, 68F333, 68334, 68335, 
68336, 68338, 68340, 68341, 68349, 68360, or 68376 


Microprocessor microprocessors operating at clock speeds up to 
Compatibility 25 MHz. 
The emulator supports both 5V and 3.3V 
operation. 
Environmental The Agilent Technologies 16610A emulation 
Characteristics module meets the environmental characteristics 
(Temperature, Altitude, of the logic analysis system in which it is installed. 
Humidity) For indoor use only. 
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Emulation module—electrical characteristics 


Characteristic Symbol Value Unit 
Supply Voltage from Target Vpp -0.3 to +5.5 V 
Vpp = 5 Volts Vpp = 3.3 Volts 

Characteristic Symbol Unit 

Min Max Min Max 
Input Current (Vpp) lit 10 6 mA 
Input Voltage Vin Vgs-0.5 | Vppt0.5 | Vgg-0.5 | Vpp+0.5 V 
Input High Voltage Vin 2 Vppt+0.5 2 Vppt+0.5 
Input Low Voltage Vi Vgs-0.5 0.8 Vgs-0.5 0.8 V 
Input High Current lin -20 -15 uA 
Input Low Current lit 0.6 0.35 mA 
Input Capacitance Cin 40 40 pF 
Output High Voltage (BKPT,IFETCH/DSI)* Voh 3.86 3 V 
Output High Current ee IFETCH/DS1) loh -4 -2 mA 
Output Low Voltage (BKPT,IFETCH/DSI) Vol 0.4 0.4 V 
Output Low Current (BKPT,IFETCH/DSI) lot 3.4 3.4 mA 
Output Low Voltage (BERR RESET; Vol 0.4 0.4 V 
Io = 12 mA* 
Output Low Voltage (BERR, RESET), Vol 0.5 0.5 V 
1) = 24 mA* 


*The Voh specification for BERR and RESET is not applicable because 
they are OPEN-collector outputs. 

Input-only pins: VDD, DS, FREEZE, I_PIPE/DSO 

Output-only pins: BKPT 

Input/output pins: IFETCH/DSI, BERR, RESET 
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General-Purpose ASCII (GPA) Symbol File 
Format 


General-purpose ASCII (GPA) format files are loaded into a logic 
analyzer just like other object files, but they are usually created 
differently. 


If your compiler is not one of those listed on page 120, if your compiler 
does not include symbol information in the output, or if you want to 
define a symbol not in the object file, you can create an ASCII format 
symbol file. 


Typically, ASCII format symbol files are created using text processing 
tools to convert compiler or linker map file output that has symbolic 
information into the proper format. 


You can typically get symbol table information from a linker map file to 
create a General-Purpose ASCII (GPA) symbol file. 


Various kinds of symbols are defined in different records in the GPA 
file. Record headers are enclosed in square brackets; for example, 
[VARIABLES]. For a summary of GPA file records and associated 
symbol definition syntax, refer to the “GPA Record Format Summary” 
that follows. 


Each entry in the symbol file must consist of a symbol name followed 
by an address or address range. 


While symbol names can be very long, the logic analyzer only uses the 
first 16 characters. 


The address or address range corresponding to a given symbol appears 
as a hexadecimal number. The address or address range must 
immediately follow the symbol name, appear on the same line, and be 
separated from the symbol name by one or more blank spaces or tabs. 
Ensure that address ranges are in the following format: 


beginning address..ending address 
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Example 

main 00001000. .00001009 

test 00001010..0000101F 

varl 00001E22 #this is a variable 


This example defines two symbols that correspond to address 
ranges and one point symbol that corresponds to a single address. 


For more detailed descriptions of GPA file records and associated 
symbol definition syntax, refer to these topics that follow: 


e SECTIONS 

e FUNCTIONS 

e VARIABLES 

e SOURCE LINES 

e START ADDRESS 


¢ Comments 
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GPA Record Format Summary 


[SECTIONS] 
section name start..end attribute 


[FUNCTIONS] 
func_name start..end 


[VARIABLES] 
var name start [size] 
var_name start..end 


[SOURCE LINES] 
File: file name 
line# address 


[START ADDRESS] 
address 


#Comments 


If no record header is specified, [VARIABLES] is assumed. Lines 
without a preceding header are assumed to be symbol definitions in 
one of the VARIABLES formats. 


Example 


This is an example GPA file that contains several different kinds of 
records: 


[SECTIONS ] 

prog 00001000..0000101F 
data 40002000. .40009FFF 
common FFFFOOOO. .FFFF1O000O 
[FUNCTIONS] 

main 00001000. .00001009 
GeESE 00001010..0000101F 
[VARIABLES] 

total 40002000 4 

value 40008000 4 
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[SOURCE LINES] 
File: main.c 


10 00001000 
alll 00001002 
14 OOO001LO0A 
22 OOOO1LO1E 
ign kes. (ESSiE CS 

5 00001010 
WT 00001012 
aL Al OO000101A 
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SECTIONS 


[SECTIONS] 
section name start..end attribute 


Use SECTIONS to define symbols for regions of memory, such as 
sections, segments, or classes. 


A symbol representing the name of the section. 
The first address of the section, in hexadecimal. 
The last address of the section, in hexadecimal. 


This is optional, and may be one of the following: 


e NORMAL (default)—The section is a normal, relocatable section, such as 
code or data. 


e NONRELOC—tThe section contains variables or code that cannot be 
relocated; this is an absolute segment. 


Define sections first 


To enable section relocation, section definitions must appear before any other 
definitions in the file. 


Example 

[SECTIONS] 

prog 00001000. .00001FFF 

data 00002000. .00003FFF 

display _io 00008000..0000801F NONRELOC 


If you use section definitions in a GPA symbol file, any subsequent 
function or variable definitions must be within the address ranges of 
one of the defined sections. Functions and variables that are not within 
the range are ignored. 
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FUNCTIONS 


[FUNCTIONS] 


func name start..end 


Use FUNCTIONS to define symbols for program functions, procedures, 


or subroutines. 


func_name A symbol representing the function name. 
start The first address of the function, in hexadecimal. 


end The last address of the function, in hexadecimal. 


Example 

[FUNCTIONS] 

main 00001000. .00001009 
ESSE 00001010. .0000101F 
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VARIABLES 
[VARIABLES] 

var name start [size] 
var_name start..end 


You can specify symbols for variables either by using the address of the 
variable, the address and the size of the variable, or a range of 
addresses occupied by the variable. If you specify only the address of a 
variable, the size is assumed to be one byte. 


A symbol representing the variable name. 
The first address of the variable, in hexadecimal. 
The last address of the variable, in hexadecimal. 


This is optional, and indicates the size of the variable, in bytes, in 
decimal. 


Example 


[VARIABLES] 

subtotal 40002000 4 

total 40002004 4 
data_array 40003000. .4000302F 
status char 40002345 
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SOURCE LINES 


[SOURCE LINES] 
File: file name 
line# address 


Use SOURCE LINES to associate addresses with lines in your source 
files. 


file name The name ofa file. 
line# The number of a line in the file, in decimal. 


address The address of the source line, in hexadecimal. 


Example 


[SOURCE LINES] 
File: main.c 


10 00001000 
iLL 00001002 
14 O0000100A 
22 O0000101E 
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START ADDRESS 


[START ADDRESS] 
address 


The address of the program entry point, in hexadecimal. 


Example 


[START ADDRESS] 
00001000 


Comments 


#comment text 


Use the # character to include comments in a file. Any text following 
the # character is ignored. You can put comments on a line alone or on 
the same line following a symbol entry. 


Example 


#This is a comment. 
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Troubleshooting the Analysis Probe 


If you encounter difficulties while making measurements, use this 
chapter to guide you through some possible solutions. Each heading 
lists a problem you may encounter, along with some possible solutions. 


If you still have difficulty using the analyzer after trying the suggestions 
in this chapter, please contact your local Agilent Technologies service 
center. 


When you are working with the analyzer, be sure to power down both the 
analyzer and the target system before disconnecting or connecting cables, 
probes, and analysis probes. Otherwise, you may damage circuitry in the 
analyzer, analysis probe, or target system. 
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Logic Analyzer Problems 


This section lists general problems that you might encounter while 
using the logic analyzer. 


Intermittent data errors 


This problem is usually caused by poor connections, incorrect signal 
levels, or marginal timing. 


_] Remove and reseat all cables and probes, ensuring that there are no bent 
pins on the analysis probe or poor probe connections. 


1 Adjust the threshold level of the data pod to match the logic levels in the 
system under test. 


1 Use an oscilloscope to check the signal integrity of the data lines. 


Clock signals for the state analyzer must meet particular pulse shape 
and timing requirements. Data inputs for the analyzer must meet pulse 
shape and setup and hold time requirements. 


See Capacitive Loading in this chapter for information on other 
sources of intermittent data errors. 
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Unwanted triggers 


Unwanted triggers can be caused by instructions that were fetched but 
not executed. 


(4 Add the prefetch queue or pipeline depth to the trigger address to avoid 
this problem. 


The logic analyzer captures prefetches, even if they are not executed. 
When you are specifying a trigger condition or a storage qualification 
that follows an instruction that may cause branching, an unused 
prefetch may generate an unwanted trigger. 


No activity on activity indicators 


11 Check for loose cables, board connections, and analysis probe connections. 


1 Check for bent or damaged pins on the analysis probe. 


No trace list display 


If there is no trace list display, it may be that your trigger specification 
is not correct for the data you want to capture, or that the trace 
memory is only partially filled. 


(1 Check your trigger sequencer specification to ensure that it will capture 
the events of interest. 


1 Try stopping the analyzer; if the trace list is partially filled, this should 
display the contents of trace memory. 
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Analyzer won't power up 


If logic analyzer power is cycled when the logic analyzer is connected 
to a target system or emulation probe that remains powered up, the 
logic analyzer may not be able to power up. Some logic analyzers are 
inhibited from powering up when they are connected to a target 
system or emulation probe that is already powered up. 


LI Remove power from the target system, then disconnect all logic analyzer 
cabling from the analysis probe. This will allow the logic analyzer to power 
up. Reconnect logic analyzer cabling after power up. 
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Analysis Probe Problems 


This section lists problems that you might encounter when using an 
analysis probe. If the solutions suggested here do not correct the 
problem, you may have a damaged analysis probe. Contact your local 
Agilent Technologies Sales Office if you need further assistance. 


Target system will not boot up 


If the target system will not boot up after connecting the analysis 
probe, the microcontroller (if socketed) or the analysis probe may not 
be installed properly, or they may not be making electrical contact. 


4 Ensure that you are following the correct power-on sequence for the 
analysis probe and target system. 


Power up the analyzer and analysis probe. 
Power up the target system. 


If you power up the target system before you power up the analysis 
probe, interface circuitry in the analysis probe may latch up and 
prevent proper target system operation. 


J Verify that the microcontroller and the analysis probe are properly rotated 
and aligned, so that the index pin on the microcontroller (pin Al) matches 
the index pin on the analysis probe. 


1 Verify that the microcontroller and the analysis probe are securely inserted 
into their respective sockets. 


11 Verify that the logic analyzer cables are in the proper sockets of the 
analysis probe and are firmly inserted. 
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Erratic trace measurements 


LI Do a full reset of the target system before beginning the measurement. 


Some analysis probe designs require a full reset to ensure correct 
configuration. 


1 Ensure that your target system meets the timing requirements of the 
processor with the analysis probe installed. 


See Capacitive loading in this chapter. While analysis probe loading is 
slight, pin protectors, extenders, and adapters may increase it to 
unacceptable levels. If the target system design has close timing 
margins, such loading may cause incorrect processor functioning and 
give erratic trace results. 


1 Ensure that you have sufficient cooling for the microcontroller. 


Ensure that you have ambient temperature conditions and airflow that 
meet or exceed the requirements of the microcontroller manufacturer. 


Capacitive loading 


Excessive capacitive loading can degrade signals, resulting in incorrect 
capture by the analysis probe, or system lockup in the microcontroller. 
All analysis probe add additional capacitive loading, as can custom 
probe fixtures you design for your application. 


Careful layout of your target system can minimize loading problems 
and result in better margins for your design. This is especially 
important for systems that are running at frequencies greater than 50 
MHz. 


1 Remove as many pin protectors, extenders, and adapters as possible. 


1 If multiple analysis probe solutions are available, use one with lower 
capacitive loading. 
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Inverse Assembler Problems 


This section lists problems that you might encounter while using the 
inverse assembler. 


When you obtain incorrect inverse assembly results, it may be unclear 
whether the problem is in the analysis probe or in your target system. If 
you follow the suggestions in this section to ensure that you are using 
the analysis probe and inverse assembler correctly, you can proceed 
with confidence in debugging your target system. 


No inverse assembly or incorrect inverse 
assembly 


This problem may be due to incorrect synchronization, modified 
configuration, incorrect connections, or a hardware problem in the 
target system. A locked status line can cause incorrect or incomplete 
inverse assembly. 


4 Ensure that each logic analyzer pod is connected to the correct analysis 
probe connector. 


There is not always a one-to-one correspondence between analyzer 
pod numbers and analysis probe cable numbers. Analysis Probes must 
supply address (ADDR), data (DATA), and status (STAT) information 
to the analyzer in a predefined order. The cable connections for each 
analysis probe are often altered to support that need. Thus, one 
analysis probe might require that you connect cable 2 to analyzer pod 
2, while another will require you to connect cable 5 to analyzer pod 2. 
See Chapter 3 for connection information. 


(1 Check the activity indicators for status lines locked in a high or low state. 


1 Verify that the STAT, DATA, and ADDR format labels have not been 
modified from their default values. 


These labels must remain as they are configured by the configuration 
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file. Do not change the names of these labels or the bit assignments 
within the labels. Some analysis probes also require other data labels. 
See Chapter 10, “Hardware Reference,” beginning on page 225 for 
more information. 


Inverse assembler will not load or run 


You need to ensure that you have the correct system software loaded 
on your analyzer. 


4 Ensure that the inverse assembler is on the same disk as the configuration 
files you are loading. 


Configuration files for the state analyzer contain a pointer to the name 
of the corresponding inverse assembler. If you delete the inverse 
assembler or rename it, the configuration process will fail to load the 
disassembler. 


See Chapter 4, “Analyzing the CPU32 with a Logic Analyzer,” beginning 
on page 97 for details. 


Solutions for CPU32 263 


Chapter 12: Troubleshooting the Analysis Probe 
Intermodule Measurement Problems 


Intermodule Measurement Problems 


Some problems occur only when you are trying to make a 
measurement involving multiple modules. 


An event wasn’t captured by one of the 
modules 


If you are trying to capture an event that occurs very shortly after the 
event that arms one of the measurement modules, it may be missed 
due to internal analyzer delays. For example, suppose you set an 
oscilloscope module to trigger upon receiving a trigger signal from the 
logic analyzer because you are trying to capture a pulse that occurs 
right after the analyzer’s trigger state. If the pulse occurs too soon after 
the analyzer’s trigger state, the oscilloscope will miss the pulse. 


(4 Adjust the skew in the Intermodule menu. 


You may be able to specify a skew value that enables the event to be 
captured. 


1 Change the trigger specification for modules upstream of the one with the 
problem. 


If you are using a logic analyzer to trigger an oscilloscope module, try 
specifying a trigger state one state before the one you are using. This 
may be more difficult than working with the skew because the prior 
state may occur more often and not always be related to the event you 
are trying to capture with the oscilloscope. 
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Analysis Probe Messages 


This section lists some of the messages that the analyzer displays when 
it encounters a problem. 


“.. Inverse Assembler Not Found” 


This error occurs if you rename or delete the inverse assembler file 
that is attached to the configuration file. 


Ensure that the inverse assembler file is not renamed or deleted, and 
that it is located in the the correct directory: 


e For Agilent Technologies 16600A/700A-series logic analysis systems it 
should be in /logic/ia. 


e For other logic analyzers it should be in the same directory as the 
configuration file. 
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“Measurement Initialization Error” 


This error occurs when you have installed the cables incorrectly for 
one or two Agilent Technologies 16550A logic analysis cards. The 
following diagrams show the correct cable connections for one-card 
and two-card installations. Ensure that your cable connections match 
the silk screening on the card, and that they are fully seated in the 
connectors. Then, repeat the measurement. 


Cable Connections for One-Card Agilent Technologies 16550A 
Installations 
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Cable Connections for Two-Card Agilent Technologies 16550A 
Installations 


The Agilent Technologies 16550A 100-MHz State/500-MHz Timing 
Logic Analyzer Service Guide. 


“No Configuration File Loaded” 


This is usually caused by trying to load a configuration file for one type 
of module/system into a different type of module/system. 


4 Verify that the appropriate module has been selected from the Load 
{module} from File {filename} in the disk operation menu. Selecting Load 
{All} will cause incorrect operation when loading most analysis probe 
configuration files. 


Chapter 3 describes how to load configuration files. 
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“Selected File is Incompatible” 


This occurs when you try to load a configuration file for the wrong 
module. Ensure that you are loading the appropriate configuration file 
for your logic analyzer. 


“Slow or Missing Clock” 


LI This error message might occur if the logic analyzer cards are not firmly 
seated in the logic analysis system frame. Ensure that the cards are firmly 
seated. 


(1 This error might occur if the target system is not running properly. Ensure 
that the target system is on and operating properly. 


Ll Ifthe error message persists, check that the logic analyzer pods are 
connected to the proper connectors on the analysis probe. See Chapter 3 
to determine the proper connections. 


“Time from Arm Greater Than 41.93 ms” 


The Agilent Technologies 16550A state/timing analyzers have a counter 
to keep track of the time from when an analyzer is armed to when it 
triggers. The width and clock rate of this counter allow it to count for 
up to 41.93 ms before it overflows. Once the counter has overflowed, 
the system does not have the data it needs to calculate the time 
between module triggers. The system must know this time to be able to 
display data from multiple modules on a single screen. 
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“Waiting for Trigger” 


If a trigger pattern is specified, this message indicates that the 
specified trigger pattern has not occurred. Verify that the triggering 
pattern is correctly set. 


(4 When analyzing microcontrollers that fetch only from word-aligned 
addresses, ensure that the trigger condition is set to look for an opcode 
fetch at an address corresponding to a word boundary. 
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Returning Parts to Agilent Technologies for 
Service 


The repair strategy for this emulation solution is board replacement. 


Exchange assemblies are available when a repairable assembly is 
returned to Agilent Technologies. These assemblies have been set up 
on the “Exchange Assembly” program. This lets you exchange a faulty 
assembly with one that has been repaired, calibrated, and performance 
verified by the factory. The cost is significantly less than that of a new 
assembly. 


To return a part to Agilent Technologies 


Follow the procedures in this chapter to make sure that the 
problem is caused by a hardware failure, not by configuration or 
cabling problems. 


In the U.S., call 1-800-403-0801. Outside the U.S., call your 
nearest Agilent Technologies sales office. Ask them for the 
address of the nearest Agilent Technologies service center. 


Package the part and send it to the Agilent Technologies service 
center. 


Keep any parts which you know are working. For example, if only the 
target interface module is broken, keep the emulation module and 
cables. 


When the part has been replaced, it will be sent back to you. 


The unit returned to you will have the same serial number as the unit 
you sent to Agilent Technologies. 


The Agilent Technologies service center can also troubleshoot the 
hardware and replace the failed part. To do this, send your entire 
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measurement system to the service center, including the logic analysis 
system, analysis probe, and cables. 


In some parts of the world, on-site repair service is available. Ask the 
Agilent Technologies sales or service representative for details. 


To obtain replacement parts 


The following table lists some parts that may be replaced if they are 
damaged or lost. Contact your nearest Agilent Technologies Sales 
Office for further information. 


Analysis Probe Replaceable Parts 


Agilent Part Number 


E2480A 
E2480-69502 
E2480-68701 
5041-9491 
E5346A 
132-Pin OFP 


E3417A 
E8119A 
144-pin TOFP 
E5336A 
E5338A 
E8120A 
160-pin TOFP 
E5350A 
£5373A 
E8122A 


Description 


Circuit board assembly 
Inverse assembler disk pouch 
Extraction Tool 

Flexible Adapter Cable 


Generic 132-Pin OQFP Probe 
132-pin QFP-FC 6833X Transition Board 


144-Pin Elastomeric Probe 
144-pin TOFP 68332 Adapter 
144-pin QFP-FV 6833X Transition Board 


176-pin TOFP Generic Flex 
160-pin QFP Elastomeric Probe Adapt 
160-pin QFP-FT 68336 Transition Board 
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Cleaning the Instrument 
If the instrument requires cleaning: 
1 Remove power from the instrument. 
2 Clean the instrument with a mild detergent and water. 


3 Make sure that the instrument is completely dry before 
reconnecting it to a power source. 
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Solving Problems 


If you have problems with the emulation module, your first task is to 
determine the source of the problem. Problems may originate in any of 
the following places: 


e The connection between the emulation module and your debugger 
e The emulation module itself 


e The connection between the emulation module and the target interface 
module 


e The connection between the target interface module and the target system 
e The target system 

You can use several means to determine the source of the problem: 

e The troubleshooting guide on the next page 

e The status lights on the emulation module 

e The emulation module "performance verification" tests 


e The emulation module's built-in commands 
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Troubleshooting Guide 


Common problems and what to do about them 


Symptom What to do See also 
Commands from the Emulation Check that you are using the correct firmware. 
Control Interface have no effect 
Commands from debugger have _ Use the Emulation Control Interface to try a few built-in page 277 
no effect commands. If this works, your debugger may not be 
configured properly. If this does not work, continue with 
the steps for the next symptom.... 
Emulator built-in commands do 1 Check that the emulator has been properly configured page 154 
not work for your target system. 
2 Run the emulator performance verification tests. page 284 
3 If the performance verification tests pass, thenthereis page 138 
an electrical problem with the connection to the target page 282 
processor OR the target system may not have been 
designed according to "Designing a Target System." 
"Slow or missing clock"message Check thatthe target system is running user code or is in 
after a logic analyzer run reset. (This message can appear if the processor is in 
background mode.) 
"Slow clock" message in the Check that the clock rate is properly configured. page 159 
Emulation Control Interface or 
"c>" prompt in the built-in 
“terminal interface” 
Some commands fail Check the "restrict to real-time runs" configuration page 164 
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Emulation Module Status Lights 


The emulation module uses status lights to communicate various 
modes and error conditions. 


The following table gives more information about the meaning of the 
power and target status lights. 


O = LED is off 
@ = LEDison 


* = Not applicable (LED is off or on) 


Power/Target Status Lights 


Pwr/Target 


LEDs Meaning 

O Reset No target system power, or emulation module is not 
O Break connected to the target system 

O Run 

@ Reset Target system is in a reset state 

O Break 

O Run 

O Reset The target processor is executing in Debug Mode 
@ Break 

O Run 

O Reset The target processor is executing user code 

O Break 

@ Run 

O Reset Only boot firmware is good (other firmware has been 
@ Break corrupted) 

@ Run 
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Emulation Module Built-in Commands 


The emulation module has some built-in commands (sometimes called 
the “terminal interface”) which you can use for troubleshooting. 


You can enter the built-in commands using: 
e A telnet (LAN) connection 
e The Command Line window in the Emulation Control Interface 


e A “debugger command” window in your debugger 


To telnet to the emulation module 


You can establish a telnet connection to the emulation module if: 


e A host computer and the logic analysis system are both connected to a 
local-area network (LAN), and 


e The host computer has the telnet program (often part of the operating 
system or an internet software package). 


To establish a telnet connection: 
Find out the port number of the emulation module. 


The default port number of the first emulation module in an Agilent 
Technologies 16600A/700A series logic analysis system is 6472. The 
default port of a second module in an Agilent Technologies 16600A- 
series system is 6476. The default port numbers of a third and fourth 
module in an expansion frame are 6480 and 6484. These port numbers 
can be changed, but that is rarely necessary. 


Find out the LAN address or LAN name of the logic analysis 
system. 


Start the telnet program. 


If the LAN name of the logic analysis system is “test2” and you have 
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only one emulation module installed, the command might look like this: 


telnet test2 6472 


If you do not see a prompt, press the <Return> key a few times. 


To exit from this telnet session, type <CTRL>D at the prompt. 


To use the built-in commands 


Here are a few commonly used built-in commands: 


Useful built-in commands 


b Break—go into the background monitor state 

cf Configuration—read or write configuration options 

help Help—display online help for built-in commands 

init Initialize—init -c re-initializes everything in the emulation module 
except for the LAN software; init -p is the equivalent of cycling 
power (it will break LAN connections) 

lan configure LAN address (emulation probes only) 

m Memory—read or write memory 

pp load Load EMSIM values into preprocessor 

reg Register—read or write a register 

r Run—start running user code 

rep Repeat—repeat a command or group of commands 

rst Reset—reset the target processor (the emulation module will wait 
for you to press the target’s RESET button) 

iS Step—do a low-level single step 

sync diff Compare EMSIM with SIM registers 

sync emsim Copy EMSIM to SIM registers 

sync sim Copy SIM to EMSIM registers 

ver Version—display the product number and firmware version of the 


emulation module 
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The prompt indicates the status of the emulation module: 


Emulation module prompts 


U Running user program 

M Running in background monitor 
p No target power 

R Emulation reset 

r Target reset 

? Unknown state 

Examples 


To set register RO, then view RO to verify that it was set, enter: 


R>rst -m 
M>reg rO=ffff 
M>reg r0 

reg RO=O000ffff 


To break execution then step a single instruction, enter: 


M>b 

M>s 
PC=XXXXXXXX 

M> 


To determine what firmware version is installed in the emulation 
module, enter: 


M>ver 


Use the help command for more information on these and other 
commands. Note that some of commands listed in the help screens are 
generic commands for Agilent Technologies emulators and may not be 
available for your product. 


If you are writing your own debugger, contact Agilent Technologies for 
more information. 


Solutions for CPU32 279 


Chapter 13: Troubleshooting the Emulation Module 
Problems with the BDM Connection 


Problems with the BDM Connection 


If a user interface behaves erratically 


1 Check the orientation of the cable connecting the target interface module 
to your target system. If the cable is offset or rotated, the emulator will try 
to interpret the “random” signals with unpredictable results. If the cable is 
rotated, the emulator or target system may also be damaged. 


41 Check that the processor clock speed has been properly configured. See 
“To configure the processor clock speed (BDM communication speed)” on 
page 159. 
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Problems with Configuration 


If you have problems displaying some registers 


(1 If your user interface can read or write “generic” registers, but cannot 
access registers that are unique to your target microcontroller, check that 
the target microcontroller matches the processor type you have 
configured in the emulator. You can use the Configuration window in the 
Emulation Control Interface to configure the target processor type. 


(1 If the value of the SP and PC are displayed as ???, see “If boot area 
accesses fail” on page 282. 


If you have problems initializing some registers 


Some registers can only be written once after processor reset. 


If you set the EMSIM values, then reset and break, the EMSIM values 
will be written to the SIM registers. If your initialization code then 
attempts to write to one of the “write once after reset” registers, the 
writes will fail. 
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Problems with the Target System 


If boot area accesses fail 


When you start a debugger interface or attempt to run from reset, the 
emulator makes four accesses to the target system boot area to find 
reset values for the SP and PC. It then attempts to read the values on 
the stack and the code at the PC. 


This problem can result in unknown values for the SP and PC 
(displayed as ???) and can make the debugger interface respond very 
slowly. 


To avoid this problem, you can do several things: 


1 Use the 10-pin connector. The extra two pins on this connector allow the 
emulator to complete unterminated memory cycles. 


(1 In your boot-up code, set the initial PC and stack pointer to memory which 
will be accessible at reset. Be sure to set the chip selects appropriately. 
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Problems with the LAN Interface 


If LAN communication does not work 


If you cannot verify the connection, or if the commands are not 
accepted by the emulation module: 


a 


a 


Make sure that you wait for the power-on self test to complete before 
connecting. 


Make sure that the LAN cable is connected. Watch the LAN LED’s on the 
back of the logic analysis system to see whether the system is seeing LAN 
activity. Refer to your LAN documentation for testing connectivity. 


Check that the host computer or debugger was configured with the correct 
LAN address. If the logic analysis system is on a different subnet than the 
host computer, check that the gateway address is correct. 


Make sure that the logic analysis system’s IP address is set up correctly. 


If it takes a long time to connect to the network 


a 


Check the subnet masks on the other LAN devices connected to your 
network. All of the devices should be configured to use the same subnet 
mask. 


Subnet mask error messages do not indicate a major problem. You can 
continue using the emulation module. 


The subnet mask is set in the logic analysis system’s System Admin 
window. If it then detects other subnet masks, it will generate error 
messages. 


If there are many subnet masks in use on the local subnet, the logic 
analysis system may take a very long time to connect to the network 
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Problems with the Emulation Module 


Occasionally you may suspect a hardware problem with the emulation 
module or target interface module. The procedures in this section 
describe how to test the hardware, and if a problem is found, how to 
repair or replace the broken component. 


To run the built-in performance verification 
test using the logic analysis system 


End any Emulation Control Interface or debugger sessions. 


Disconnect the 50-pin cable from the emulation module, and plug 
the loopback test board (Agilent part number E3496-66502) into 
the emulation module. 


In the system window, click the emulation module and select 
Performance Verification. 


Click Start PV. 


The results will appear onscreen. 
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To run complete performance verification tests 
using a telnet connection 


Disconnect the 50-pin cable from the emulation module, and plug 
the loopback test board (Agilent part number E3496-66502) 
directly into the emulation module. Do not plug anything into the 
other end of the loopback test board. 


On a good system, the RESET LED will light and the BKG and USER 
LEDs will be out. 


2 telnet to the emulation module. 


3 Enter the py 1 command. 


Options available for the “pv” command are explained in the help 
screen displayed by typing “help pv’ or “? pv’ at the prompt. Note, 
however, that some of the options listed may not apply to your 
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emulation module. 


Examples 


If you are using a UNIX system, to telnet to a logic analysis system 
named “mylogic”, enter: 


telnet mylogic 6472 

Here are some examples of ways to use the pv command. 
To execute both tests one time: 

Tian 


To execute test 2 with maximum debug output repeatedly until a 
AC is entered: 


iow scl =v9) O 
To execute tests 3, 4, and 5 only for 2 cycles: 
pv -t3-5 2 


The results on a good system with the loopback test board 
connected, are as follows: 


M>pv 1 
Testing: E3499C Series Emulation System 
Test 1: Powerup PV Results Passed! 
Test 2: Target Probe Feedback Test Passed! 
Test 3: Boundary Scan Master Test Passed! 
Test 4: I2C Test Passed! 
Test 5: Data Lines Test Passed! 
Number of tests: 1 Number of failures: 0 


Copyright (c) Agilent Technologies 1987-2000 


All Rights Reserved. Reproduction, adaptation, or translation without 
prior 
written permission is prohibited, except as allowed under copyright laws. 


E3499C Series Emulation System 
Version: A.07.53 26Feb98 
Location: Generics 


E3490A Motorola CPU16/32 BDM Emulator 
Version: A.02.05 26Feb98 
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If a performance verification test fails 


L] Details of the failure can be obtained through using a -v option (“verbose” 
level) of 2 or more. 


1 Check that the loopback test board is connected. 


1 Ifthe problem persists, contact Agilent for assistance. 
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Returning Parts to Agilent Technologies for 
Service 


The repair strategy for this emulation solution is board replacement. 


Exchange assemblies are available when a repairable assembly is returned 
to Agilent Technologies. These assemblies have been set up on the 
“Exchange Assembly” program. This lets you exchange a faulty assembly 
with one that has been repaired, calibrated, and performance verified by 
the factory. The cost is significantly less than that of a new assembly. 


To return a part to Agilent Technologies 


Follow the procedures in this chapter to make sure that the 
problem is caused by a hardware failure, not by configuration or 
cabling problems. 


In the U.S., call 1-800-403-0801. Outside the U.S., call your 
nearest Agilent Technologies sales office. Ask them for the 
address of the nearest Agilent Technologies service center. 


Package the part and send it to the Agilent Technologies service 
center. 


Keep any parts which you know are working. For example, if only the 
target interface module is broken, keep the emulation module and 
cables. 


When the part has been replaced, it will be sent back to you. 


The unit returned to you will have the same serial number as the unit you 
sent to Agilent Technologies. 


The Agilent Technologies service center can also troubleshoot the 
hardware and replace the failed part. To do this, send your entire 
measurement system to the service center, including the logic analysis 
system, target interface module, and cables. 
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In some parts of the world, on-site repair service is available. Ask an 
Agilent Technologies sales or service representative for details. 


To obtain replacement parts and cables 


The following table lists some parts that may be replaced if they are 
damaged or lost. Contact your nearest Agilent Technologies Sales 
Office for further information. 


Exchange assemblies 


Part number Description 


16600-69515 Emulation module 


Replacement assemblies 


Part number Description 

E3496-61601 50-pin control cable 

E3496-61603 10-pin BDM cable 

E3496-66502 Loopback test board 

E3458-66501 CPU32 target interface module 
16700-61608 Expansion cable 


To clean the instrument 


If the instrument requires cleaning: 
1 Remove power from the instrument. 


2 Clean with a mild detergent and water. 
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3 Make sure that the instrument is completely dry before 
reconnecting it to a power source. 
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Analysis Probe A probing solution 
connected to the target 
microcontroller. It provides an 
interface between the signals of the 
target microcontroller and the inputs 
of the logic analyzer. Formerly called 
a “preprocessor.” 


Elastomeric Probe Adapter A 
connector that is fastened on top of a 
target microcontroller using a 
retainer and knurled nut. The 
conductive elastomer on the bottom 
of the probe adapter makes contact 
with pins of the target 
microcontroller and delivers their 
signals to connection points on top of 
the probe adapter. 


Emulation Module An emulation 
module is installed within the 
mainframe of a logic analyzer. It 
provides run control within an 
emulation and analysis test setup. 
See Emulation Probe. 


Emulation Probe An emulation 
probe is a standalone instrument 
connected via LAN to the mainframe 
of a logic analyzer or to a host 
computer. It provides run control 
within an emulation and analysis test 
setup. Formerly called a “processor 
probe” or “software probe.” See 
Emulation Module. 


Emulator An emulation module or 


an emulation probe. 


Extender A part whose only 
function is to provide connections 
from one location to another. One or 
more extenders might be stacked to 
raise a probe above a target 
micoprocessor to avoid mechanical 
contact with other components 
installed close to the target 
microcontroller. Sometimes called a 
“connector board.” 


Flexible Adapter Two connection 
devices coupled with a flexible cable. 
Used for connecting probing 
hardware on the target 
microcontroller to the analysis probe. 


General-Purpose Flexible 
Adapter A cable assembly that 
connects the signals from an 
elastomeric probe adapter to an 
analysis probe. Normally, a male-to- 
male header or transition board 
makes the connections from the 
general-purpose flexible adapter to 
the analysis probe. 


High-Density Adapter Cable A 
cable assembly that delivers signals 
from an analysis probe hardware 
interface to the logic analyzer pod 
cables. A high-density adapter cable 
has a single Mictor connector that is 
installed into the analysis probe, and 
two cables that are connected to 


Solutions for CPU32 


291 


Glossary 


corresponding odd and even logic 
analyzer pod cables. 


High-Density Termination 
Adapter Cable Same as a High- 
Density Adapter Cable, except it has 
a termination in the Mictor 
connector. 


Jumper Moveable direct electrical 
connection between two points. 


Mainframe Logic Analyzer A logic 
analyzer that resides on one or more 
board assemblies installed in an 
Agilent Technologies 16500, 1660- 
series, or 16600A/700A-series 
mainframe. 


Male-to-male Header A board 
assembly that makes point-to-point 
connections between the female pins 
of a flexible adapter or transition 
board and the female pins of an 
analysis probe. 


Preprocessor See Analysis Probe. 


Preprocessor Interface See 
Analysis Probe. 


Probe adapter See Elastomeric 
Probe Adapter. 


Processor Probe See Emulation 


Prototype Analyzer The Agilent 
Technologies 16505A prototype 
analyzer acts as an analysis and 
display processor for the Agilent 
Technologies 16500B/C logic analysis 
system. It provides a windowed 
interface and powerful analysis 
capabilities. Replaced by Agilent 
Technologies 16600A/700A-series 
logic analysis systems. 


Run Control Probe See Emulation 
Probe and Emulation Module. 


Setup Assistant A software 
program that guides a user through 
the process of connecting and 
configuring a logic analyzer to make 
measurements on a specific 
microcontroller. 


Shunt Connector. See Jumper. 


Software Probe See Emulation 
Probe. 


Solution Agilent Technologies’ term 
for a set of tools for debugging your 
target system. A solution includes 
probing, inverse assembly, the 
Agilent Technologies B4620B Source 
Correlation Tool Set, and an 
emulation module. 


Stand-alone Logic Analyzer A 


Probe. standalone logic analyzer has a 
predefined set of hardware 
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components which provide a specific different order for delivery at the 


set of capabilities. It is designed to other side of the board. 

perform logic analysis. A standalone 

logic analyzer differs from a 1/4-Flexible Adapter An adapter 
mainframe logic analyzer in that it that obtains one-quarter of the 
does not offer card slots for signals from an elastomeric probe 
installation of additional capabilities, adapter (one side of a target 

and its specifications are not microcontroller) and makes them 


modified based upon selection froma available for probing. 
set of optional hardware boards that 
might be installed within its frame. 


Target Control Port An 8-bit, TTL 
port on a logic analysis system that 
you can use to send signals to your 
target system. It does not function 
like a pattern generator or emulation 
module, but more like a remote 
control for the target’s switches. 


Target Interface Module A small 
circuit board which connects the 50- 
pin cable from an emulation module 
or emulation probe to signals from 
the debug port on a target system. 


TIM See Target Interface Module. 


Trigger Specification A set of 
conditions that must be true before 
the instrument triggers. See the 
printed or online documentation for 
your logic analyzer for details. 


Transition Board A board assembly 
that obtains signals connected to one 
side and rearranges them ina 
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- (prefetched instruction symbol), 
111 


A 


ADDR label, modifying, 100 
addresses 
mask, 112 
offset, 130 
PC label, 127 
reconstruction, 89, 228 
type, 103 
analysis probe 
additional equipment supported, 
22 
clocking, 228 
connecting to, 151 
connection overview, 41 
definition, 291 
dimensions, 38 
equipment required, 22 
equipment supplied, 20 
inverse assembly, 107 
microprocessors supported, 227 
modes of operation, 99 
operating characteristics, 227 
overview, 2 
power on/power off sequence, 39 
processors supported, 4 
product numbers, 4 
storage qualification, 106 
target system requirements, 37 
theory of operation, 228 
analysis probe problems, 260 
erratic trace measurements, 261 
target system will not boot, 260 
analyzer problems, 257 
capacitive loading, 261 
intermittent data errors, 257 
unwanted triggers, 258 
analyzing the processor, 97 
ASCII format (GPA), 246 
assistant 


See setup assistant 


B 


BDM port 
See debug port 
bits 
labels, 100 
LSB and MSB, 100 
STAT, 103 
BKG light, 276 
branches, displaying, 112 
breakpoints 
tracing until, 223 
built-in commands 
configuration, 156 
list of commands, 277 
bus cycle termination, 138 


C 


cables 
BDM, 149 
emulator, 148 
high-density, 50 
replacing, 271 
CD-ROM, installing software from, 
32 
cf commands, 156 
characteristics 
analysis probe, 227 
emulation module, 244 
checklist 
setup, 17 
circuit board, dimensions, 38 
cleaning, 272, 289 
clearance, analysis probe, 37 
clock speed 
configuring, 159 
clocks 
logic analyzer, 99 
qualification, 106 
qualified, and emulator, 216 
slow, 222, 224, 268 


comments, in GPA files, 254 
compilers, 120 
configuration 

checklist, 17 

emulation module 


overview, 154 


using debugger, 157 
logic analyzers, 91, 100 
configuration files 
installing, 29 
loading, 91, 93 
names of, 95 
connection 
analysis probe, 35 
emulation module, 131, 132 
problems, LAN, 283 
setup checklist, 17 
connector 
BDM, 149 
debug port, 138 
connector board, 291 
creating GPA symbol files, 246 


D 


DATA label, modifying, 100 
debug port 

connecting to, 148 

connections, 138 
debuggers 

configuration, 157 

Green Hills, 192 

SDS, 201 

writing, 279 
development port 

See debug port 
Diab Data 

compiler, 122 
dimensions of analysis probe, 38 
directories 

configuration files, 92 

source code, 128 
display filtering, 112 
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E 


elastomeric probe adapter 
definition, 291 

EMSIM registers, 167 
configuring analysis probe, 89 
displaying, 168 
example with debugger, 197 
purpose of, 168 

Emulation Control Interface 
configuration, 155 
introduction, 133 
when to use, 212 

emulation module 


Agilent Technologies 16600 
installation, 145 
Agilent Technologies 16700A 


installation, 143 
configuration, 157 
connecting, 132, 147 
definition, 291 
description of, 2 
product numbers, 4 
target system design, 138 

emulation probe 
definition, 291 
emulation solution 
See solution 
emulator 
definition, 291 
enhanced inverse assembler 
logic analyzer requirements, 24 
environmental characteristics 
emulation module, 243 
equipment required 
analysis probe, 22 
emulation module, 26 
equipment supplied, 20 
analysis probe, 20 
emulation module, 25 
ordering information, 4 
overview, 4 
erratic behavior, 280 
error messages 


inverse assembler, 265 
examples, measurement, 213 
extender, 291 


F 
files 
loading vs. installing, 30 
filtering, display, 112 
firmware 
emulation module, 153 
updating, 152, 153 
version, 153 
flash ROM 
updating emulator, 152 
flexible adapter 
definition, 291 
floppy disks 
duplicating, 93 
flowchart 
setup, 17 
format menu, 100 
ull solution, 3 
FUNCTIONS in GPA format, 251 


G 


General-Purpose ASCII format, 246 
address format, 246 
comments, 254 
FUNCTIONS, 251 
record format summary, 248 
record headers, 246 
SECTIONS, 250 
simple form, 246 
SOURCE LINES, 253 
START ADDRESS, 254 
VARIABLES, 252 

general-purpose flexible adapter 
definition, 291 

Green Hills 
compiler, 123 
debugger, 192 


H 


high-density adapter cable 
definition, 291 

high-density termination adapter 
definition, 292 

HRESET signal, 138 


I 


information sources, 28 
installation, software, 29 
intermodule measurement 
creating, 215 
intermodule measurement 
problems, 264 
an event wasn’t captured, 264 
analyzer doesn’t stop, 216 
internal cycles, 118 
internal registers, 167 
inverse assembler 
configuration file names, 95 
loading files, 92, 93 
output format, 110 
requirements for, 107 
requirements for enhanced, 24 
inverse assembler problems, 262 
failure to load or run, 263 
incorrect inverse assembly, 262 
no inverse assembly, 262 
inverse assembly, 107 
displays, 212 
pods required, 23 


J 
jumper, definition, 292 


K 
keep-out area, 37 


L 


LAN 
problems, 283 
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ights 
See status lights 
isting 
incorrect, 262 
Listing menu, 107 
isting windows, 212 
Load menu, 112 
oading configurations 
logic analyzer, 91 
vs. installing, 29 
ogic analyzers 
Agilent Technologies 
connections, 64 
Agilent Technologies 16554/55/56 
connections, 68 
Agilent Technologies 1660 series 
connections, 70 
Agilent Technologies 16600A and 
16700A-series, 19 


16550A 


Agilent Technologies 16600A 
connections, 52 

Agilent Technologies 16601A 
connections, 55 

Agilent Technologies 16602A 
connections, 58 

Agilent Technologies 16603A 


connections, 61 

Agilent Technologies 1661 series 
connections, 72 

Agilent Technologies 1662-series 
connections, 74 

Agilent Technologies 1670 series 
connections, 76 

Agilent Technologies 1671 series 
connections, 79 

Agilent Technologies 1672-series 
connections, 82 

clocking, 106 

configuration, 100 

configuring, 92, 93 

loading configuration files, 91 

software version requirements, 
24 


storage qualification, 106 
supported, 23 
LSB, 100 


M 


mainframe logic analyzer 
definition, 292 
male-to-male header 
definition, 292 
mask, subnet, 283 
MCR 
SHEN configuration, 118 
measurement examples, 213 
memory banks, 112 
microprocessors supported, 4 
Microtec Research Inc. 
compiler, 124 
modes 
operating, 99 
modifying, 100 
MSB, 100 
MULTI debugger, 192 


O 


object module file symbols, 118 

offset, address, 130 

offset, trigger, 111 

online configuration help, 19 

operating characteristics 
analysis probe, 227 
emulation module, 243 

Options menu, 112, 113 

orientation, socket, 42 


P 


parts supplied, 20 

path, source file, 128 

PC label, 127 

pods, labels on, 50 

port number, emulation module, 
277 

power on/power off sequence, 39 


prefetches, 111 
preprocessor 

See analysis probe 
problems 

analysis probe, 255 
processor support package, 32 
processor type 

configuring, 158 

effect on EMSIM registers, 170 
processors supported, 4 
program symbols, 118 
prompts, 279 

list of, 279 
prototype analyzer 

definition, 292 
PV 

See performance verification 


Q 
QFP socket, 42 


R 


real-time runs, configuring, 164 
record format, General-Purpose 
ASCII, 248 
record headers, 246 
references, 28 
registers 
initializing, 281 
internal, 167 
problems displaying, 281, 282 
unknown values, 282 
repair 
analysis probe, 270 
emulation module, 288 
requirements 
target system, 37, 138 
RESET 
light, 276 
reset 
effects of, SDS debugger, 202 
effects on SIM registers, 173 
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run control tool 
See emulation control interface 


S 


SDS debugger, 201 
Section Format, 246 
SECTIONS in GPA format, 250 
service, how to obtain, 270, 288 
setup 
See configuration 
setup assistant, 19 
definition, 292 
setup checklist, 17 
SHEN Gin MCR), 118 
signals 
debug port, 138 
logic analyzer, 231 
SIM registers 
configuring, 173 
configuring analysis probe, 89 
displaying, 168 
introduction, 168 
SingleStep debugger, 201 
skid, reducing, 216 
slow clock message, 222, 224, 275 
socket, QFP, 42 
software 
installing, 29 
list of installed, 33 
requirements, 24 
software addresses, 127 
software analyzer 
its dependence on 
reconstruction, 228 
software probe 
See emulation probe 
software requirements, 24 
software,emulation module 
firmware, 153 
solution 
at a glance, 2 
definition, 292 


address 


solutions 
description of, 2 
equipment required, 27 
product numbers, 4 
source code, 115 
displays, 212 
source correlation, 22 
data display, 108 
in analyzer, 115 
using, 125 
source file search path, 128 
SOURCE LINES in GPA format, 
253 
specifications 
See characteristics 
SRESBHT signal, 138 
START ADDRESS in GPA format, 
254 
STAT, 100 
encoding, 103 
label, 103 
state, 228 
mode of operation, 99 
status bits, 103 
status encoding, 103 
status lights, 276 
subnet mask, 283 
symbol files 
creating, 246 
symbols 
in analyzer, 115 
its dependency on 
reconstruction, 228 
object file, 118 
object module file, 118 
predefined, 104, 117 
program, 118 
user-defined, 117 
synchronous mode, 99 


address 


T 
target control port 


definition, 293 
target interface module (TIM) 
connecting, 148 
definition, 293 
target system 
boot failure, 260 
connecting to, 132 
keep-out area, 37 
power sequence, 39 
requirements for analysis probe, 
37 
requirements for emulation, 138 
telnet, 277 
terminal interface 
See also built-in commands 
tests, emulation module, 284 
The, 19 
timing, 228 
mode of operation, 99 
trace, 218 
erratic, 261 
missing display, 258 
trace list alignment 
its dependency on 
reconstruction, 228 
transition board 
definition, 293 
trigger 
address reconstruction, 228 
emulation module, 214 
on break, 219 
source code, 129 
specification, 100 
unwanted, 258 
troubleshooting, 275 
analysis probe, 255, 256 


address 


U 


unexecuted prefetches, 111 
until processor halts, 218 
USER light, 276 
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Vv 


VARIABLES in GPA format, 252 
versions 

emulation module firmware, 153 

logic analyzer software, 24 
voltage 

emulation module, 244 


Ww 


web sites 
Agilent Technologies logic 
analyzers, 28 
See Also under debugger names 
wizard 
See setup assistant 
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The information contained in this 
document is subject to change 
without notice. 


Agilent Technologies makes 
no warranty of any kind with 
regard to this material, 
including, but not limited to, 
the implied warranties of 
merchantability or fitness for 
a particular purpose. 


Agilent Technologies shall not be 
liable for errors contained herein 
or for damages in connection with 
the furnishing, performance, or 


Safety 


This apparatus has been designed 
and tested in accordance with 
TEC Publication 1010, Safety 
Requirements for Measuring 
Apparatus, and has been supplied 
inasafe condition. This is a 
Safety Class I instrument 
(provided with terminal for 
protective earthing). Before 
applying power, verify that the 
correct safety precautions are 
taken (see the following 
warnings). In addition, note the 
external markings on the 
instrument that are described 
under "Safety Symbols." 


Warning 

¢ Before turning on the 
instrument, you must connect the 
protective earth terminal of the 
instrument to the protective 
conductor of the (mains) power 
cord. The mains plug shall only be 
inserted in a socket outlet 
provided with a protective earth 
contact. You must not negate the 
protective action by using an 
extension cord (power cable) 
without a protective conductor 
(grounding). Grounding one 
conductor of a two-conductor 
outlet is not sufficient protection. 


¢ Only fuses with the required 
rated current, voltage, and 
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not use repaired fuses or short- 
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safety hazard. 
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modification to the instrument. 


© Capacitors inside the 
instrument may retain a charge 
even if the instrument is 
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supply. 
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ZN 


Instruction manual symbol: the 
product is marked with this 
symbol when it is necessary for 
you to refer to the instruction 
manual in order to protect against 
damage to the product. 


J 


Hazardous voltage symbol. 
I 


Earth terminal symbol: Used to 
indicate a circuit common 
connected to grounded chassis. 


WARNING 


The Warning sign denotes a 
hazard. It calls attention to a 
procedure, practice, or the like, 
which, if not correctly performed 
or adhered to, could result in 
personal injury. Do not proceed 
beyond a Warning sign until the 
indicated conditions are fully 
understood and met. 


CAUTION 


The Caution sign denotes a 
hazard. It calls attention to an 
operating procedure, practice, or 
the like, which, if not correctly 
performed or adhered to, could 


teres result in damage to or destruction 
of part or all of the product. Do 
not proceed beyond a Caution 
symbol until the indicated 
conditions are fully understood or 
met. 
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This Agilent Technologies 
product has a warranty against 
defects in material and 
workmanship for a period of one 
year from date of shipment. 
During the warranty period, 
Agilent Technologies will, at its 
option, either repair or replace 
products that prove to be 
defective. 


For warranty service or repair, 
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Agilent Technologies. 


For products returned to Agilent 
Technologies for warranty 
service, the Buyer shall prepay 
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Technologies and Agilent 
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charges to return the product to 
the Buyer. However, the Buyer 
shall pay all shipping charges, 
duties, and taxes for products 
returned to Agilent Technologies 
from another country. 


Agilent Technologies warrants 
that its software and firmware 
designated by Agilent 
Technologies for use with an 
instrument will execute its 
programming instructions when 
properly installed on that 
instrument. Agilent Technologies 
does not warrant that the 
operation of the instrument 
software, or firmware will be 
uninterrupted or error free. 


Limitation of Warranty 


The foregoing warranty shall not 
apply to defects resulting from 
improper or inadequate 
maintenance by the Buyer, 
Buyer- supplied software or 
interfacing, unauthorized 
modification or misuse, operation 
outside of the environmental 
specifications for the product, or 
improper site preparation or 
maintenance. 


No other warranty is 
expressed or implied. Agilent 
Technologies specifically 
disclaims the implied 
warranties of merchantability 
or fitness for a particular 
purpose. 


Exclusive Remedies 


The remedies provided herein are 
the buyer’s sole and exclusive 
remedies. Agilent Technologies 
shall not be liable for any direct, 
indirect, special, incidental, or 
consequential damages, whether 
based on contract, tort, or any 
other legal theory. 


Assistance 


Product maintenance agreements 
and other customer assistance 
agreements are available for 
Agilent Technologies products. 
For any assistance, contact your 
nearest Agilent Technologies 
Sales Office. 


Certification 

Agilent Technologies certifies that 
this product met its published 
specifications at the time of 
shipment from the factory. 
Agilent Technologies further 
certifies that its calibration 
measurements are traceable to 
the United States National 
Institute of Standards and 
Technology, to the extent allowed 
by the Institute’s calibration 
facility, and to the calibration 
facilities of other International 
Standards Organization members. 


About this edition 


This is the Solutions for 
Motorola CPU32 User's Guide. 


Publication number 
E2480-97003, June 2000 
Printed in USA. 


The information in this manual 
previously appeared in: 


E3458-97000, Feb 1997 
2480-97001, May 1997 
E2480-97002, July 1998 


Many product updates do not 
require manual changes, and 
manual corrections may be done 
without accompanying product 
changes. Therefore, do not expect 
a one-to-one correspondence 
between product updates and 
manual updates. 


Reflection 1 is a U.S. trademark of 
Whlker, Richer & Quinn, Inc. 


UNIX is a registered trademark of 
The Open Group. 


Windows, MS Windows, Windows 
NT, and MS-DOS are U.S. 
registered trademarks of 
Microsoft Corporation. 


X/Open is a registered trademark, 
and the X device is a trademark of 
X/Open Company Ltd. in the UK 
and other countries. 


